Read the docs

Yoast

Records28All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Yoast records in CISA KEV

No Yoast vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Yoast Seo 10 records MEDIUM Wordpress Seo 4 records LOW Google Analytics 1 record LOW Google Analytics Dashboard 1 record MEDIUM Yoast Local Seo 1 record LOW

Records

10 records in Yoast Seo · all components

TI-2018-13725 CVE-2018-19370 · GHSA-vwcv-7hjf-vgcf

A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in…

Priority LOW 35

A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the Yoast SEO (wordpress-seo) plugin before 9.2.0 for WordPress allows an SEO Manager to perform command execution on the Operatin…

CVSS 3.0MEDIUM 6.6 Network High privileges No interaction EPSS 0.03205 Published 2018-11-28 No fix listed CWE-362
TI-2021-07396 CVE-2021-25118 · GHSA-946c-79cp-58mf

Yoast SEO 16.7-17.2 - Unauthenticated Full Path Disclosure

Priority LOW 33

The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify other vulnerabilities o…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.05632 Published 2022-02-28 Fixed in 17.3 CWE-200
TI-2023-21472 CVE-2023-40680 · GHSA-h5fw-7h4g-p3xc

WordPress Yoast SEO Plugin <= 21.0 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Yoast Yoast SEO allows Stored XSS.This issue affects Yoast SEO: from n/a through 21.0.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00427 Published 2023-11-30 No fix listed CWE-79
TI-2021-06445 CVE-2021-24153 · GHSA-qj4c-xvxc-5hqj

Yoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS)

Priority LOW 27

A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as ale…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01115 Published 2021-04-05 Fixed in 3.4.1 CWE-79
Open these records in search →