Read the docs

Yoast

Records28All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Yoast records in CISA KEV

No Yoast vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Yoast Seo 10 records MEDIUM Wordpress Seo 4 records LOW Google Analytics 1 record LOW Google Analytics Dashboard 1 record MEDIUM Yoast Local Seo 1 record LOW

Records

4 records in Wordpress Seo · all components

TI-2015-02025 CVE-2015-2292 · GHSA-fp7j-jm6r-w2qr

Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the…

Priority LOW 37

Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remote authenticated user…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.05611 Published 2015-03-17 No fix listed CWE-89
TI-2015-02026 CVE-2015-2293 · GHSA-cj93-76vr-mmxw

Multiple cross-site request forgery (CSRF) vulnerabilities in…

Priority LOW 33

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remot…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01521 Published 2015-03-17 No fix listed CWE-352
TI-2012-05394 CVE-2012-6692 · GHSA-j4p9-6rjr-3vwx

Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by…

Priority LOW 26

Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin before 2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the post_title parameter t…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03184 Published 2015-06-17 No fix listed CWE-79
TI-2017-12389 CVE-2017-16842 · GHSA-5gph-h85c-3ffg

Cross-site scripting (XSS) vulnerability in…

Priority LOW 25

Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPress allows remote attackers to inject arbitrary web script or HTML.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01345 Published 2017-11-16 No fix listed CWE-79
Open these records in search →