Access violation vulnerability in Rankology SEO – On-site SEO 2.2.3

The Rankology SEO plugin for WordPress has a vulnerability that allows unauthorized changes to be made to data. This can lead to an increase in privileges for attackers. The issue is due to a missing capability check in the save_rankology_settings() function in all versions up to 2.2.3. This means that attackers with at least Subscriber-level access can change various options on the WordPress site. They could potentially change the default registration role to administrator and enable user registration, giving them administrative access to the site.