Rank Math SEO - Author+ Term Metadata Update and Cross-Object Post Title Overwrite via updateMetaBulk

The plugin does not perform a capability check when processing bulk metadata updates targeting taxonomy terms, and reuses the supplied object identifier across different object types. This allows users with the Author role or above to modify SEO metadata of terms they cannot edit, and to overwrite the titles of posts belonging to other users.

A low-privileged author can tamper with taxonomy SEO metadata outside their permission scope and, more critically, overwrite post titles belonging to other authors — enabling content integrity attacks (defacement, misinformation, SEO sabotage) across the site without needing editor/admin privileges.