Skip to content

Product

yoast wordpress seo vulnerabilities

4 published CVES affecting yoast wordpress seo, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
4
Critical
0
High
0
Medium
4
Low
0
Unscored
0
CISA KEV
0

Latest yoast wordpress seo CVEs

Newest publication first

  2. CVE-2012-6692 Yoast SEO <= 2.1.1 - Cross Site Scripting via post_title parameter

    Published
    MediumCVSS 4.3 EPSS 3.2%

    Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin before 2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the post_title parameter to wp-admin/post-new.php, which is not properly handled in th...

  3. CVE-2015-2293 Yoast SEO <= 1.7.3.3 - Cross-Site Request Forgery

    Published
    MediumCVSS 6.8 EPSS 1.5%

    Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remote attackers to hijack the authentication of certain users fo...

  4. CVE-2015-2292 Yoast SEO <= 1.7.3.3 - Blind SQL Injection

    Published
    MediumCVSS 6.5 EPSS 5.6% Public exploit

    Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) order_by or...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.