Yoast SEO – Advanced SEO with real-time guidance and built-in AI

Güvenlik açıkları

• CVE-2015-2293

  Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin be

  Orta 6.8

• CVE-2018-19370

  A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the Yoast SEO (wordpress-seo) plugin before 9.2.0

  Orta 6.6

• CVE-2015-2292

  Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x be

  Orta 6.5

• CVE-2026-15425

  Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name)

  Orta 6.4

• CVE-2026-3427

  Yoast SEO <= 27.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute

  Orta 6.4

• CVE-2026-1293

  Yoast SEO <= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute

  Orta 6.4

• CVE-2024-4984

  Yoast SEO <= 22.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2024-4041

  Yoast SEO <= 22.5 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2021-24153→ 3.4.1

  Yoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS)

  Orta 5.4

• CVE-2023-40680

  WordPress Yoast SEO Plugin <= 21.0 is vulnerable to Cross Site Scripting (XSS)

  Orta 4.8

• CVE-2017-16842

  Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPre

  Orta 4.8

• CVE-2025-14481

  Yoast SEO <= 26.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'post_id' Parameter

  Orta 4.3

• CVE-2012-6692

  Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin before 2.2 for WordPress allows remote

  Orta 4.3