Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Yoast Component: Wordpress Seo Clear all filters
TI-2017-12389 CVE-2017-16842 · GHSA-5gph-h85c-3ffg

Cross-site scripting (XSS) vulnerability in…

Priority LOW 25

Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPress allows remote attackers to inject arbitrary web script or HTML.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01345 Published 2017-11-16 No fix listed CWE-79
TI-2012-05394 CVE-2012-6692 · GHSA-j4p9-6rjr-3vwx

Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by…

Priority LOW 26

Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin before 2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the post_title parameter t…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03184 Published 2015-06-17 No fix listed CWE-79
TI-2015-02026 CVE-2015-2293 · GHSA-cj93-76vr-mmxw

Multiple cross-site request forgery (CSRF) vulnerabilities in…

Priority LOW 33

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remot…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01521 Published 2015-03-17 No fix listed CWE-352
TI-2015-02025 CVE-2015-2292 · GHSA-fp7j-jm6r-w2qr

Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the…

Priority LOW 37

Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remote authenticated user…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.05611 Published 2015-03-17 No fix listed CWE-89