Yoast SEO – Advanced SEO with real-time guidance and built-in AI

Уязвимости

• CVE-2015-2293

  Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin be

  Средний 6.8

• CVE-2018-19370высокие права

  A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the Yoast SEO (wordpress-seo) plugin before 9.2.0

  Средний 6.6

• CVE-2015-2292нужен вход

  Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x be

  Средний 6.5

• CVE-2026-15425автор+≤ 28.0

  Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name)

  Средний 6.4

• CVE-2026-3427участник+≤ 27.1.1

  Yoast SEO <= 27.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute

  Средний 6.4

• CVE-2026-1293участник+≤ 26.8

  Yoast SEO <= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute

  Средний 6.4

• CVE-2024-4984участник+≤ 22.6

  Yoast SEO <= 22.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2024-4041без авторизации · нужен клик≤ 22.5

  Yoast SEO <= 22.5 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2021-24153нужен вход→ 3.4.1

  Yoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS)

  Средний 5.4

• CVE-2023-40680высокие права≤ 21.0

  WordPress Yoast SEO Plugin <= 21.0 is vulnerable to Cross Site Scripting (XSS)

  Средний 4.8

• CVE-2017-16842высокие права

  Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPre

  Средний 4.8

• CVE-2025-14481участник+≤ 26.5

  Yoast SEO <= 26.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'post_id' Parameter

  Средний 4.3

• CVE-2012-6692

  Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin before 2.2 for WordPress allows remote

  Средний 4.3