N/A
2026-02-05< 26.9
Yoast SEO <= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute
Yoast SEO – Advanced SEO with real-time guidance and built-in AI
Minimum safe version
27.2
Update to 27.2 or later to address 32 fixable vulnerabilities
Latest available27.5 ✓
N/A
2026-03-21< 27.2
Yoast SEO <= 27.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute
Medium 6.4
2024-05-16< 22.7
CVE-2024-4984
Medium 6.1
2024-05-09< 22.6
CVE-2024-4041
Medium 5.9
2023-11-30< 21.1
CVE-2023-40680
N/A
< 1.4.5
Yoast SEO - Security issue which allowed any user to reset settings
N/A
< 1.4.7
Yoast SEO < 1.4.7 - Reset Settings Feature Access Restriction Bypass
N/A
< 3.2.5
Yoast SEO <= 3.2.4 - Subscriber Settings Sensitive Data Exposure
N/A
< 3.3.0
Yoast SEO <= 3.2.5 - Unspecified Cross-Site Scripting (XSS)
N/A
2023-03-03< 20.2.1
WordPress Yoast SEO Plugin <= 20.2 is vulnerable to Cross Site Scripting (XSS)
N/A
2023-03-02< 20.2.1
Yoast SEO <= 20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
N/A
2014-08-01< 1.4.7
Yoast SEO <= 1.4.6 - Missing Authorization
N/A
2015-04-20< 2.1
Yoast SEO <= 2.0.1 - Reflected Cross-Site Scripting
N/A
2016-05-06< 3.2.5
Yoast SEO <= 3.2.4 - Sensitive Data Exposure
N/A
2016-06-14< 3.3.0
Yoast SEO <= 3.2.5 - Cross-Site Scripting
N/A
2015-04-20< 2.1
WordPress SEO by Yoast Plugin <= 2.0.1 - Cross Site Scripting
N/A
2016-05-06< 3.2.5
WordPress SEO by Yoast Plugin <= 3.2.4 - Sensitive Data Exposure
N/A
2016-06-14< 3.3.0
WordPress SEO by Yoast Plugin <= 3.2.5 - Cross Site Scripting
N/A
2016-07-28< 1.4.7
WordPress SEO by Yoast Plugin <= 1.4.6 - Bypass
N/A
2016-07-28< 1.4.5
WordPress SEO by Yoast Plugin <= 1.4.4 - Unknown Vulnerability
N/A
2016-08-03< 3.4.1
WordPress SEO by Yoast Plugin <= 3.4.0 - Cross Site Scripting
N/A
2017-05-11< 3.3.2
WordPress Yoast SEO plugin <= 3.3.1 - Cross-site Request Forgery (CSRF) Vulnerability
N/A
2017-11-20< 5.8.0
WordPress Yoast SEO plugin <=5.7.1 - Unauthenticated Cross-Site Scripting (XSS) vulnerability
N/A
2018-11-20< 9.2.0
WordPress Yoast SEO plugin <= 9.1.0 - Authenticated Command Execution vulnerability
N/A
2015-03-17< 1.7.4
CVE-2015-2293
N/A
2015-03-17< 1.7.4
CVE-2015-2292
N/A
2015-06-17< 2.2
CVE-2012-6692
Medium 4.8
2017-11-22< 5.8.0
Yoast SEO <= 5.7.1 - Reflected Cross-Site Scripting
Medium 6.6
2018-11-28< 9.2.0
CVE-2018-19370
Critical 9.8
2019-07-10< 11.6
WordPress Yoast SEO plugin 1.2.0-11.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Medium 5.4
2021-04-05< 3.4.1
CVE-2021-24153
Medium 5.3
2022-02-28< 17.3
CVE-2021-25118