Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

yoast yoast seo vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv2
CVE-2015-2292
Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin prior to 1.5.7, 1.6.x prior to 1.6.4, and 1.7.x prior to 1.7.4 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) order_...
Yoast Wordpress Seo 1.6.2Yoast Wordpress Seo 1.6.3Yoast Wordpress SeoYoast Wordpress Seo 1.7.3Yoast Wordpress Seo 1.7.3.1Yoast Wordpress Seo 1.6.0Yoast Wordpress Seo 1.6.1Yoast Wordpress Seo 1.7.3.2Yoast Wordpress Seo 1.7.3.3Yoast Wordpress Seo 1.7.1Yoast Wordpress Seo 1.7.2
6.8
CVSSv2
CVE-2015-2293
Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin prior to 1.5.7, 1.6.x prior to 1.6.4, and 1.7.x prior to 1.7.4 for WordPress allow remote malicious users to hijack the authentication of cert...
Yoast Wordpress Seo 1.7.2Yoast Wordpress Seo 1.7.3Yoast Wordpress Seo 1.7.3.1Yoast Wordpress Seo 1.7.3.2Yoast Wordpress SeoYoast Wordpress Seo 1.6.0Yoast Wordpress Seo 1.6.2Yoast Wordpress Seo 1.7.1Yoast Wordpress Seo 1.7.3.3Yoast Wordpress Seo 1.6.1Yoast Wordpress Seo 1.6.3
7.5
CVSSv2
CVE-2019-13478
The Yoast SEO plugin prior to 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions.
Yoast Yoast Seo 11.6Yoast Yoast Seo
3.5
CVSSv2
CVE-2021-24153
A Stored Cross-Site Scripting vulnerability exists in the Yoast SEO WordPress plugin prior to 3.4.1, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as alert but bypasses were found.
Yoast Yoast Seo
3.5
CVSSv2
CVE-2021-36788
The yoast_seo (aka Yoast SEO) extension prior to 7.2.3 for TYPO3 allows XSS.
Yoast Yoast Seo
NA
CVE-2023-40680
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Yoast Yoast SEO allows Stored XSS.This issue affects Yoast SEO: from n/a up to and including 21.0.
Yoast Yoast Seo
6
CVSSv2
CVE-2018-19370
A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the Yoast SEO (wordpress-seo) plugin prior to 9.2.0 for WordPress allows an SEO Manager to perform command execution on the Operating System via a ZIP import.
Yoast Yoast Seo
5
CVSSv2
CVE-2021-25118
The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabi...
Yoast Yoast Seo
NA
CVE-2023-32300
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Yoast Yoast SEO: Local plugin <= 14.8 versions.
Yoast Yoast Seo
NA
CVE-2023-28785
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Yoast Yoast SEO: Local plugin <= 14.9 versions.
Yoast Yoast Seo
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook