Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
yoast wordpress seo vulnerabilities and exploits
(subscribe to this query)
655
VMScore
CVE-2015-2292
Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin prior to 1.5.7, 1.6.x prior to 1.6.4, and 1.7.x prior to 1.7.4 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) order_...
Yoast Wordpress Seo 1.6.2
Yoast Wordpress Seo 1.6.3
Yoast Wordpress Seo
Yoast Wordpress Seo 1.7.3
Yoast Wordpress Seo 1.7.3.1
Yoast Wordpress Seo 1.6.0
Yoast Wordpress Seo 1.6.1
Yoast Wordpress Seo 1.7.3.2
Yoast Wordpress Seo 1.7.3.3
Yoast Wordpress Seo 1.7.1
Yoast Wordpress Seo 1.7.2
1 EDB exploit
605
VMScore
CVE-2015-2293
Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin prior to 1.5.7, 1.6.x prior to 1.6.4, and 1.7.x prior to 1.7.4 for WordPress allow remote malicious users to hijack the authentication of cert...
Yoast Wordpress Seo 1.7.2
Yoast Wordpress Seo 1.7.3
Yoast Wordpress Seo 1.7.3.1
Yoast Wordpress Seo 1.7.3.2
Yoast Wordpress Seo
Yoast Wordpress Seo 1.6.0
Yoast Wordpress Seo 1.6.2
Yoast Wordpress Seo 1.7.1
Yoast Wordpress Seo 1.7.3.3
Yoast Wordpress Seo 1.6.1
Yoast Wordpress Seo 1.6.3
383
VMScore
CVE-2012-6692
Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin prior to 2.2 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the post_title parameter to wp-admin/post-new.php, which is not properly handl...
Yoast Wordpress Seo
312
VMScore
CVE-2017-16842
Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin prior to 5.8.0 for WordPress allows remote malicious users to inject arbitrary web script or HTML.
Yoast Wordpress Seo
668
VMScore
CVE-2019-13478
The Yoast SEO plugin prior to 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions.
Yoast Yoast Seo 11.6
Yoast Yoast Seo
534
VMScore
CVE-2018-19370
A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the Yoast SEO (wordpress-seo) plugin prior to 9.2.0 for WordPress allows an SEO Manager to perform command execution on the Operating System via a ZIP import.
Yoast Yoast Seo
312
VMScore
CVE-2021-24153
A Stored Cross-Site Scripting vulnerability exists in the Yoast SEO WordPress plugin prior to 3.4.1, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as alert but bypasses were found.
Yoast Yoast Seo
445
VMScore
CVE-2021-25118
The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabi...
Yoast Yoast Seo
NA
CVE-2024-4984
The Yoast SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘display_name’ author meta in all versions up to, and including, 22.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
NA
CVE-2024-4041
The Yoast SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 22.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated malicious users to inject arbitrary web sc...
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-20065
open redirect
CVE-2024-1086
path traversal
CVE-2024-29825
XXE
CVE-2024-29822
CVE-2024-20696
CVE-2024-3564
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started