Known Vulnerabilities for products from Yoast
Listed below are 16 of the newest known vulnerabilities associated with the vendor "Yoast".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57764 json | Not Provided | 2026-07-02 | 2026-07-02 | |
| CVE-2026-53740 json | Not Provided | 2026-06-10 | 2026-06-11 | |
| CVE-2026-53739 json | Not Provided | 2026-06-10 | 2026-06-11 | |
| CVE-2026-40722 json | Not Provided | 2026-06-17 | 2026-06-17 | |
| CVE-2026-24591 json | Not Provided | 2026-01-23 | 2026-04-28 | |
| CVE-2025-14481 json | Not Provided | 2026-05-27 | 2026-05-27 | |
| CVE-2024-33641 json | Not Provided | 2024-04-29 | 2026-04-28 | |
| CVE-2023-40680 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Yoast Yoast SEO al... | Not Provided | 2023-11-30 | 2026-04-28 |
| CVE-2023-32300 json | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Yoast Yoast SEO: Local plugin <= 14.8 versions. | 6.1 - MEDIUM | 2023-08-23 | 2023-08-29 |
| CVE-2023-28785 json | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Yoast Yoast SEO: Local plugin <= 14.9 versions. | 5.4 - MEDIUM | 2023-05-28 | 2023-06-01 |
| CVE-2023-28780 json | Not Provided | 2023-11-18 | 2026-04-28 | |
| CVE-2021-36788 json | The yoast_seo (aka Yoast SEO) extension before 7.2.3 for TYPO3 allows XSS. | 5.4 - MEDIUM | 2021-08-13 | 2021-08-20 |
| CVE-2021-31779 json | The yoast_seo (aka Yoast SEO) extension before 7.2.1 for TYPO3 allows SSRF via a backend user account. | 6.4 - MEDIUM | 2021-04-28 | 2021-05-07 |
| CVE-2021-25118 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 5.3 - MEDIUM | 2022-02-28 | 2022-10-27 |
| CVE-2021-24153 json | A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had built-in... | 5.4 - MEDIUM | 2021-04-05 | 2021-04-09 |
| CVE-2019-13478 json | The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions. | 9.8 - CRITICAL | 2019-07-09 | 2023-02-24 |
| CVE-2018-19370 json | A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the Yoast SEO (wordpress-seo) plugi... | 6.6 - MEDIUM | 2018-11-28 | 2019-01-31 |
| CVE-2017-20092 json | A vulnerability classified as problematic was found in Google Analytics Dashboard Plugin 2.1.1. Affected by this vulnerabilit... | 6.1 - MEDIUM | 2022-06-24 | 2022-06-30 |
| CVE-2017-16842 json | Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin before 5.... | Not Provided | 2017-11-16 | 2025-04-20 |
| CVE-2015-2293 json | Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by ... | Not Provided | 2015-03-17 | 2026-05-06 |
Known software with vulnerabilities from Yoast
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Yoast | Wordpress Seo | 1.5.6 |
| Application | Yoast | Yoast Seo | 1.4.15 |