Skip to content
Noroxi

Yoast records

17 published records for vendor yoast.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
41.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 21
  5. 22
  6. 23
  7. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2019-13478
    40Plan

    The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions.

    CriticalCVSS 9.8No exploitEPSS 3%

    yoast · yoast seoJul 9, 2019

  • CVE-2023-28780
    35Monitor

    WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    yoast · yoast local seoNov 18, 2023

  • CVE-2015-2292
    28Monitor

    Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x be

    MediumCVSS 6.5Proof of conceptEPSS 6%

    yoast · wordpress seoMar 17, 2015

  • CVE-2018-19370
    27Monitor

    A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the Yoast SEO (wordpress-seo) plugin before 9.2.0

    MediumCVSS 6.6No exploitEPSS 3%

    yoast · yoast seoNov 28, 2018

  • CVE-2015-2293
    27Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin be

    MediumCVSS 6.8No exploitEPSS 2%

    yoast · wordpress seoMar 17, 2015

  • CVE-2021-31779
    25Monitor

    The yoast_seo (aka Yoast SEO) extension before 7.2.1 for TYPO3 allows SSRF via a backend user account.

    MediumCVSS 6.4No exploitEPSS 0%

    yoast · yoast seoApr 28, 2021

  • CVE-2017-20092
    24Monitor

    Google Analytics Dashboard Plugin cross site scriting

    MediumCVSS 6.1No exploitEPSS 1%

    yoast · google analytics dashboardJun 24, 2022

  • CVE-2023-32300
    24Monitor

    WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    yoast · yoast seoAug 23, 2023

  • CVE-2021-25118
    23Monitor

    Yoast SEO 16.7-17.2 - Unauthenticated Full Path Disclosure

    MediumCVSS 5.3Proof of conceptEPSS 6%

    yoast · yoast seoFeb 28, 2022

  • CVE-2021-24153
    21Monitor

    Yoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 1%

    yoast · yoast seoApr 5, 2021

  • CVE-2021-36788
    21Monitor

    The yoast_seo (aka Yoast SEO) extension before 7.2.3 for TYPO3 allows XSS.

    MediumCVSS 5.4No exploitEPSS 0%

    yoast · yoast seoAug 13, 2021

  • CVE-2023-28785
    21Monitor

    WordPress Yoast SEO: Local Plugin <= 14.9 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    yoast · yoast seoMay 28, 2023

  • CVE-2023-28775
    21Monitor

    WordPress Yoast SEO Premium plugin <= 20.4 - Unauthenticated Zapier API Key Reset vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    yoast · yoast seoJun 11, 2024

  • CVE-2017-16842
    19Monitor

    Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPre

    MediumCVSS 4.8No exploitEPSS 1%

    yoast · wordpress seoNov 15, 2017

  • CVE-2023-40680
    19Monitor

    WordPress Yoast SEO Plugin <= 21.0 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    yoast · yoast seoNov 30, 2023

  • CVE-2012-6692
    18Monitor

    Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin before 2.2 for WordPress allows remote

    MediumCVSS 4.3No exploitEPSS 3%

    yoast · wordpress seoJun 17, 2015

  • CVE-2014-9174
    18Monitor

    Cross-site scripting (XSS) vulnerability in the Google Analytics by Yoast (google-analytics-for-wordpress) plugin before 5.1.3 for WordPress

    MediumCVSS 4.3No exploitEPSS 2%

    yoast · google analyticsDec 2, 2014