yoast

Top products

The 15 most recently published vulnerabilities affecting yoast.

• CVE-2026-15425Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name)6.4Jul 25, 2026
• CVE-2026-53740Yoast Duplicate Post through 4.6 Stored Cross-Site Scripting via Scheduled Republish Notice5.4Jun 10, 2026
• CVE-2026-53739Yoast Duplicate Post through 4.6 Cross-Site Request Forgery via duplicate_post_dismiss_notice4.3Jun 10, 2026
• CVE-2025-14481Yoast SEO <= 26.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'post_id' Parameter4.3May 27, 2026
• CVE-2026-3427Yoast SEO <= 27.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute6.4Mar 22, 2026
• CVE-2026-1217Yoast Duplicate Post <= 4.5 - Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite5.4Mar 18, 2026
• CVE-2019-25314Duplicate-Post 3.2.3 - Persistent Cross-Site Scripting5.5Feb 11, 2026
• CVE-2026-1293Yoast SEO <= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute6.4Feb 6, 2026
• CVE-2023-28775WordPress Yoast SEO Premium plugin <= 20.4 - Unauthenticated Zapier API Key Reset vulnerability5.3Jun 11, 2024
• CVE-2024-4984Yoast SEO <= 22.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4May 16, 2024
• CVE-2024-4041Yoast SEO <= 22.5 - Reflected Cross-Site Scripting6.1May 9, 2024
• CVE-2023-40680WordPress Yoast SEO Plugin <= 21.0 is vulnerable to Cross Site Scripting (XSS)5.9Nov 30, 2023
• CVE-2023-28780WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Request Forgery (CSRF)6.5Nov 18, 2023
• CVE-2023-32300WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Scripting (XSS)7.1Aug 23, 2023
• CVE-2023-28785WordPress Yoast SEO: Local Plugin <= 14.9 is vulnerable to Cross Site Scripting (XSS)6.5May 28, 2023