Vulnerabilities > Yoast

DATE CVE VULNERABILITY TITLE RISK
2024-06-11 CVE-2023-28775 Unspecified vulnerability in Yoast SEO
Missing Authorization vulnerability in Yoast Yoast SEO Premium.This issue affects Yoast SEO Premium: from n/a through 20.4.
network
low complexity
yoast
5.3
2023-11-30 CVE-2023-40680 Unspecified vulnerability in Yoast SEO
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Yoast Yoast SEO allows Stored XSS.This issue affects Yoast SEO: from n/a through 21.0.
network
low complexity
yoast
4.8
2023-11-18 CVE-2023-28780 Unspecified vulnerability in Yoast Local SEO
Cross-Site Request Forgery (CSRF) vulnerability in Yoast Yoast Local Premium.This issue affects Yoast Local Premium: from n/a through 14.8.
network
low complexity
yoast
8.8
2023-08-23 CVE-2023-32300 Unspecified vulnerability in Yoast SEO
Unauth.
network
low complexity
yoast
6.1
2023-05-28 CVE-2023-28785 Unspecified vulnerability in Yoast SEO
Auth.
network
low complexity
yoast
5.4
2022-06-24 CVE-2017-20092 Cross-site Scripting vulnerability in Yoast Google Analytics Dashboard 2.1.1
A vulnerability classified as problematic was found in Google Analytics Dashboard Plugin 2.1.1.
network
low complexity
yoast CWE-79
6.1
2022-02-28 CVE-2021-25118 Unspecified vulnerability in Yoast SEO
The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.
network
low complexity
yoast
5.3
2021-08-13 CVE-2021-36788 Cross-site Scripting vulnerability in Yoast SEO 7.2.0/7.2.1
The yoast_seo (aka Yoast SEO) extension before 7.2.3 for TYPO3 allows XSS.
network
low complexity
yoast CWE-79
5.4
2021-04-28 CVE-2021-31779 Server-Side Request Forgery (SSRF) vulnerability in Yoast SEO 7.2.0
The yoast_seo (aka Yoast SEO) extension before 7.2.1 for TYPO3 allows SSRF via a backend user account.
network
low complexity
yoast CWE-918
6.4
2021-04-05 CVE-2021-24153 Cross-site Scripting vulnerability in Yoast SEO
A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as alert but bypasses were found.
network
low complexity
yoast CWE-79
5.4