Skip to contentYoast Seo vulnerabilities
- yoast seo – advanced seo with real-time guidance and built-in aiYoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name)CVE-2026-154256.4 Medium
- yoast seo – advanced seo with real-time guidance and built-in aiYoast SEO <= 26.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'post_id' ParameterCVE-2025-144814.3 Medium
- yoast seo – advanced seo with real-time guidance and built-in aiYoast SEO <= 27.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block AttributeCVE-2026-34276.4 Medium
- yoast seo – advanced seo with real-time guidance and built-in aiYoast SEO <= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block AttributeCVE-2026-12936.4 Medium
- yoast seo premium, seo +1 moreWordPress Yoast SEO Premium plugin <= 20.4 - Unauthenticated Zapier API Key Reset vulnerabilityCVE-2023-287755.3 Medium
- yoast seo – advanced seo with real-time guidance and built-in aiYoast SEO <= 22.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-49846.4 Medium
- yoast seo – advanced seo with real-time guidance and built-in aiYoast SEO <= 22.5 - Reflected Cross-Site ScriptingCVE-2024-4041Public exploit6.1 Medium
- team yoast yoast seo, yoast seo +1 moreWordPress Yoast SEO Plugin <= 21.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-406805.9 Medium
- yoast seo: local, seo +1 moreWordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Scripting (XSS)CVE-2023-323007.1 High
- yoast seo: local, seo +1 moreWordPress Yoast SEO: Local Plugin <= 14.9 is vulnerable to Cross Site Scripting (XSS)CVE-2023-287856.5 Medium
- unknown yoast seo, yoast seo +1 moreYoast SEO 16.7-17.2 - Unauthenticated Full Path DisclosureCVE-2021-251185.3 Medium
- unknown yoast seo, yoast seo +1 moreYoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS)CVE-2021-241535.4 Medium