Yoast: >> Yoast Seo >> 17.2 Security Vulnerabilities
Missing Authorization vulnerability in Yoast Yoast SEO Premium.This issue affects Yoast SEO Premium: from n/a through 20.4.
CVSS Score
5.3
EPSS Score
0.001
Published
2024-06-11
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Yoast Yoast SEO allows Stored XSS.This issue affects Yoast SEO: from n/a through 21.0.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-11-30
The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.
CVSS Score
5.3
EPSS Score
0.274
Published
2022-02-28