Rankie - Wordpress Rank Tracker Plugin

Rankie - Wordpress Rank Tracker Plugin has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 3 are fixed as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.5 out of 10. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include Missing Authorization, SQL Injection.

Every one of the 3 issues recorded for Rankie - Wordpress Rank Tracker Plugin has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Nguyễn Trung Kiên.

Strategic Overview

Avg CVSSMedium

5.6/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Rankie - Wordpress Rank Tracker Plugin vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2025-39486

Rankie - Wordpress Rank Tracker Plugin < 1.8.2 - Authenticated (Subscriber+) SQL Injection

Read the full analysis

Vulnerability Records

3 records


2025-06-26 00:00	Rankie <= 1.8.2 - Reflected Cross-Site Scripting Rankie - Wordpress Rank Tracker Plugin <= 1.8.2	`CVE-2025-39487`	6.1 Medium	Nguyễn Trung Kiên	Yes
2025-06-17 00:00	Rankie - Wordpress Rank Tracker Plugin < 1.8.2 - Authenticated (Subscriber+) SQL Injection Rankie - Wordpress Rank Tracker Plugin < 1.8.2	`CVE-2025-39486`	6.5 Medium	Nguyễn Trung Kiên	Yes
2025-05-16 00:00	Rankie < 1.8.2 - Missing Authorization Rankie - Wordpress Rank Tracker Plugin < 1.8.2	`CVE-2025-39493`	4.3 Medium	Nguyễn Trung Kiên	Yes

Showing 1–3 of 3 reports