Yoast vulnerabilities

Products

• Seo 10
• Seo – Advanced Seo With Real-time Guidance And Built-in Ai 6
• Wordpress Seo 4
• Duplicate Post 3
• Seo 3
• Seo: Local 2

Newest

• yoast seo – advanced seo with real-time guidance and built-in ai Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name) CVE-2026-15425 6.4 MediumJuly 25, 2026
• yoast duplicate post Yoast Duplicate Post through 4.6 Stored Cross-Site Scripting via Scheduled Republish Notice CVE-2026-53740 5.1 MediumJune 10, 2026
• yoast duplicate post Yoast Duplicate Post through 4.6 Cross-Site Request Forgery via duplicate_post_dismiss_notice CVE-2026-53739 5.1 MediumJune 10, 2026
• yoast seo – advanced seo with real-time guidance and built-in ai Yoast SEO <= 26.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'post_id' Parameter CVE-2025-14481 4.3 MediumMay 27, 2026
• yoast seo – advanced seo with real-time guidance and built-in ai Yoast SEO <= 27.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute CVE-2026-3427 6.4 MediumMarch 22, 2026
• yoast duplicate post Yoast Duplicate Post <= 4.5 - Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite CVE-2026-1217 Fix available 5.4 MediumMarch 18, 2026
• yoast duplicate-post Duplicate-Post 3.2.3 - Persistent Cross-Site Scripting CVE-2019-25314 4.8 MediumFebruary 11, 2026
• yoast seo – advanced seo with real-time guidance and built-in ai Yoast SEO <= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute CVE-2026-1293 6.4 MediumFebruary 6, 2026
• yoast seo premium, seo +1 more WordPress Yoast SEO Premium plugin <= 20.4 - Unauthenticated Zapier API Key Reset vulnerability CVE-2023-28775 5.3 MediumJune 11, 2024
• yoast seo – advanced seo with real-time guidance and built-in ai Yoast SEO <= 22.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4984 6.4 MediumMay 16, 2024
• yoast seo – advanced seo with real-time guidance and built-in ai Yoast SEO <= 22.5 - Reflected Cross-Site Scripting CVE-2024-4041 Public exploit 6.1 MediumMay 9, 2024
• team yoast yoast seo, yoast seo +1 more WordPress Yoast SEO Plugin <= 21.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-40680 5.9 MediumNovember 30, 2023
• yoast local premium, local seo +1 more WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-28780 6.5 MediumNovember 18, 2023
• yoast seo: local, seo +1 more WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-32300 7.1 HighAugust 23, 2023
• yoast seo: local, seo +1 more WordPress Yoast SEO: Local Plugin <= 14.9 is vulnerable to Cross Site Scripting (XSS) CVE-2023-28785 6.5 MediumMay 28, 2023
• unspecified google analytics dashboard plugin, yoast google analytics dashboard +1 more Google Analytics Dashboard Plugin cross site scriting CVE-2017-20092 3.5 LowJune 24, 2022
• unknown yoast seo, yoast seo +1 more Yoast SEO 16.7-17.2 - Unauthenticated Full Path Disclosure CVE-2021-25118 5.3 MediumFebruary 28, 2022
• yoast seo Cross-site Scripting in the yoast_seo TYPO3 extension CVE-2021-36788 Fix available 5.4 MediumAugust 13, 2021
• yoast seo Server-Side Request Forgery in yoast_seo CVE-2021-31779 Fix available 6.4 MediumApril 28, 2021
• unknown yoast seo, yoast seo +1 more Yoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24153 5.4 MediumApril 5, 2021
• yoast seo The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in... CVE-2019-13478 9.9 CriticalJuly 9, 2019
• yoast seo A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the... CVE-2018-19370 6.6 MediumNovember 28, 2018
• yoast wordpress seo Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in... CVE-2017-16842 4.8 MediumNovember 16, 2017
• yoast wordpress seo Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast... CVE-2012-6692 4.3 MediumJune 17, 2015
• yoast wordpress seo Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table... CVE-2015-2293 6.8 MediumMarch 17, 2015
• yoast wordpress seo Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress... CVE-2015-2292 Public exploit 6.5 MediumMarch 17, 2015
• yoast google analytics Cross-site scripting (XSS) vulnerability in the Google Analytics by Yoast (google-analytics-for... CVE-2014-9174 4.3 MediumDecember 2, 2014