Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
yoast yoast seo vulnerabilities and exploits
(subscribe to this query)
5.3
CVSSv3
CVE-2021-25118
The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabi...
Yoast Yoast Seo
4.8
CVSSv3
CVE-2023-40680
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Yoast Yoast SEO allows Stored XSS.This issue affects Yoast SEO: from n/a up to and including 21.0.
Yoast Yoast Seo
4.8
CVSSv3
CVE-2017-16842
Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin prior to 5.8.0 for WordPress allows remote malicious users to inject arbitrary web script or HTML.
Yoast Wordpress Seo
NA
CVE-2023-28775
Missing Authorization vulnerability in Yoast Yoast SEO Premium.This issue affects Yoast SEO Premium: from n/a up to and including 20.4.
NA
CVE-2012-6692
Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin prior to 2.2 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the post_title parameter to wp-admin/post-new.php, which is not properly handl...
Yoast Wordpress Seo
NA
CVE-2015-2292
Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin prior to 1.5.7, 1.6.x prior to 1.6.4, and 1.7.x prior to 1.7.4 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) order_...
Yoast Wordpress Seo 1.7.2
Yoast Wordpress Seo 1.7.1
Yoast Wordpress Seo
Yoast Wordpress Seo 1.7.3
Yoast Wordpress Seo 1.6.1
Yoast Wordpress Seo 1.7.3.1
Yoast Wordpress Seo 1.6.2
Yoast Wordpress Seo 1.7.3.3
Yoast Wordpress Seo 1.6.0
Yoast Wordpress Seo 1.6.3
Yoast Wordpress Seo 1.7.3.2
1 EDB exploit
NA
CVE-2015-2293
Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin prior to 1.5.7, 1.6.x prior to 1.6.4, and 1.7.x prior to 1.7.4 for WordPress allow remote malicious users to hijack the authentication of cert...
Yoast Wordpress Seo 1.7.2
Yoast Wordpress Seo 1.7.1
Yoast Wordpress Seo
Yoast Wordpress Seo 1.7.3
Yoast Wordpress Seo 1.6.1
Yoast Wordpress Seo 1.7.3.1
Yoast Wordpress Seo 1.6.2
Yoast Wordpress Seo 1.7.3.3
Yoast Wordpress Seo 1.6.0
Yoast Wordpress Seo 1.6.3
Yoast Wordpress Seo 1.7.3.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2018-25103
CVE-2024-36279
CVE-2024-38457
elevation of privilege
CVE-2024-27801
CVE-2024-30103
NULL pointer dereference
CVE-2024-6057
XML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2