Remote Code Execution via settings ZIP import in Yoast SEO

The Yoast SEO settings import extracted every file from an uploaded ZIP archive into a web-accessible uploads folder and only removed it afterwards. A user with the SEO Manager role could put a PHP file in the archive and run it on the server during that window. The patch stops extracting the archive to disk and imports the settings text directly.

This vulnerability affects the following application versions:

  • Yoast SEO 1.5.4.2
  • Yoast SEO 1.5.5
  • Yoast SEO 1.5.5.1
  • Yoast SEO 1.5.5.2
  • Yoast SEO 1.5.5.3
  • Yoast SEO 1.5.6
  • Yoast SEO 1.6
  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1

Fix unauthorized access to post metadata

Ensures users without the required capabilities cannot read post metadata they are not permitted to access.

This vulnerability affects the following application versions:

  • Yoast SEO 19.6
  • Yoast SEO 19.6.1
  • Yoast SEO 19.7
  • Yoast SEO 19.7.1
  • Yoast SEO 19.7.2
  • Yoast SEO 19.8
  • Yoast SEO 19.9
  • Yoast SEO 19.10
  • Yoast SEO 19.11
  • Yoast SEO 19.12
  • Yoast SEO 19.13
  • Yoast SEO 19.14
  • Yoast SEO 20.0
  • Yoast SEO 20.1
  • Yoast SEO 20.2
  • Yoast SEO 20.2.1
  • Yoast SEO 20.3
  • Yoast SEO 20.4
  • Yoast SEO 20.5
  • Yoast SEO 20.6
  • Yoast SEO 20.7
  • Yoast SEO 20.8
  • Yoast SEO 20.9
  • Yoast SEO 20.10
  • Yoast SEO 20.11
  • Yoast SEO 20.12
  • Yoast SEO 20.13
  • Yoast SEO 21.0
  • Yoast SEO 21.1
  • Yoast SEO 21.2
  • Yoast SEO 21.3
  • Yoast SEO 21.4
  • Yoast SEO 21.5
  • Yoast SEO 21.6
  • Yoast SEO 21.7
  • Yoast SEO 21.8
  • Yoast SEO 21.8.1
  • Yoast SEO 21.9
  • Yoast SEO 21.9.1
  • Yoast SEO 22.0
  • Yoast SEO 22.1
  • Yoast SEO 22.2
  • Yoast SEO 22.3
  • Yoast SEO 22.4
  • Yoast SEO 22.5
  • Yoast SEO 22.6
  • Yoast SEO 22.7
  • Yoast SEO 22.8
  • Yoast SEO 22.9
  • Yoast SEO 23.0
  • Yoast SEO 23.1
  • Yoast SEO 23.2
  • Yoast SEO 23.3
  • Yoast SEO 23.4
  • Yoast SEO 23.5
  • Yoast SEO 23.6
  • Yoast SEO 23.7
  • Yoast SEO 23.8
  • Yoast SEO 23.9
  • Yoast SEO 24.0
  • Yoast SEO 24.1
  • Yoast SEO 24.2
  • Yoast SEO 24.3
  • Yoast SEO 24.4
  • Yoast SEO 24.5
  • Yoast SEO 24.6
  • Yoast SEO 24.7
  • Yoast SEO 24.8
  • Yoast SEO 24.8.1
  • Yoast SEO 24.9
  • Yoast SEO 25.0
  • Yoast SEO 25.1
  • Yoast SEO 25.2
  • Yoast SEO 25.3
  • Yoast SEO 25.3.1
  • Yoast SEO 25.4
  • Yoast SEO 25.5
  • Yoast SEO 25.6
  • Yoast SEO 25.7
  • Yoast SEO 25.8
  • Yoast SEO 25.9
  • Yoast SEO 26.0
  • Yoast SEO 26.1
  • Yoast SEO 26.1.1
  • Yoast SEO 26.2
  • Yoast SEO 26.3
  • Yoast SEO 26.4
  • Yoast SEO 26.5

XSS in the admin bar menu

Esacpes strings when outputting them in the view at admin bar menu

This vulnerability affects the following application versions:

  • Yoast SEO 19.12
  • Yoast SEO 19.13
  • Yoast SEO 19.14
  • Yoast SEO 20.0
  • Yoast SEO 20.1
  • Yoast SEO 20.2
  • Yoast SEO 20.2.1
  • Yoast SEO 20.3
  • Yoast SEO 20.4
  • Yoast SEO 20.5
  • Yoast SEO 20.6
  • Yoast SEO 20.7
  • Yoast SEO 20.8
  • Yoast SEO 20.9
  • Yoast SEO 20.10
  • Yoast SEO 20.11
  • Yoast SEO 20.12
  • Yoast SEO 20.13
  • Yoast SEO 21.0
  • Yoast SEO 21.1
  • Yoast SEO 21.2
  • Yoast SEO 21.3
  • Yoast SEO 21.4
  • Yoast SEO 21.5
  • Yoast SEO 21.6
  • Yoast SEO 21.7
  • Yoast SEO 21.8
  • Yoast SEO 21.8.1
  • Yoast SEO 21.9
  • Yoast SEO 21.9.1
  • Yoast SEO 22.0
  • Yoast SEO 22.1
  • Yoast SEO 22.2
  • Yoast SEO 22.3
  • Yoast SEO 22.4
  • Yoast SEO 22.5

XSS attack in search query

Prevents XSS attack in url when using the search query

This vulnerability affects the following application versions:

  • Yoast SEO 17.4
  • Yoast SEO 17.5
  • Yoast SEO 17.6
  • Yoast SEO 17.7
  • Yoast SEO 17.7.1
  • Yoast SEO 17.8
  • Yoast SEO 17.9
  • Yoast SEO 18.0
  • Yoast SEO 18.1
  • Yoast SEO 18.2
  • Yoast SEO 18.3
  • Yoast SEO 18.4
  • Yoast SEO 18.4.1
  • Yoast SEO 18.5
  • Yoast SEO 18.5.1
  • Yoast SEO 18.6
  • Yoast SEO 18.7
  • Yoast SEO 18.8
  • Yoast SEO 18.9
  • Yoast SEO 19.0
  • Yoast SEO 19.1
  • Yoast SEO 19.2
  • Yoast SEO 19.3
  • Yoast SEO 19.4
  • Yoast SEO 19.5
  • Yoast SEO 19.5.1
  • Yoast SEO 19.6
  • Yoast SEO 19.6.1
  • Yoast SEO 19.7
  • Yoast SEO 19.7.1
  • Yoast SEO 19.7.2
  • Yoast SEO 19.8
  • Yoast SEO 19.9
  • Yoast SEO 19.10
  • Yoast SEO 19.11
  • Yoast SEO 19.12
  • Yoast SEO 19.13
  • Yoast SEO 19.14
  • Yoast SEO 20.0
  • Yoast SEO 20.1
  • Yoast SEO 20.2
  • Yoast SEO 20.2.1
  • Yoast SEO 20.3
  • Yoast SEO 20.4
  • Yoast SEO 20.5
  • Yoast SEO 20.6
  • Yoast SEO 20.7
  • Yoast SEO 20.8
  • Yoast SEO 20.9
  • Yoast SEO 20.10
  • Yoast SEO 20.11
  • Yoast SEO 20.12
  • Yoast SEO 20.13
  • Yoast SEO 21.0
  • Yoast SEO 21.1
  • Yoast SEO 21.2
  • Yoast SEO 21.3
  • Yoast SEO 21.4
  • Yoast SEO 21.5
  • Yoast SEO 21.6
  • Yoast SEO 21.7
  • Yoast SEO 21.8
  • Yoast SEO 21.8.1
  • Yoast SEO 21.9
  • Yoast SEO 21.9.1
  • Yoast SEO 22.0

XSS in the dismiss plugin

The dismiss plugin conflict is not properly sanitized against an XSS attack.

This vulnerability affects the following application versions:

  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0
  • Yoast SEO 11.1
  • Yoast SEO 11.1.1
  • Yoast SEO 11.2
  • Yoast SEO 11.2.1
  • Yoast SEO 11.3
  • Yoast SEO 11.4
  • Yoast SEO 11.5
  • Yoast SEO 11.6
  • Yoast SEO 11.7
  • Yoast SEO 11.8
  • Yoast SEO 11.9
  • Yoast SEO 12.0
  • Yoast SEO 12.1
  • Yoast SEO 12.2
  • Yoast SEO 12.3
  • Yoast SEO 12.4
  • Yoast SEO 12.5
  • Yoast SEO 12.5.1
  • Yoast SEO 12.6
  • Yoast SEO 12.6.1
  • Yoast SEO 12.6.2
  • Yoast SEO 12.7
  • Yoast SEO 12.7.1
  • Yoast SEO 12.8
  • Yoast SEO 12.8.1
  • Yoast SEO 12.9
  • Yoast SEO 12.9.1
  • Yoast SEO 13.0
  • Yoast SEO 13.1
  • Yoast SEO 13.2
  • Yoast SEO 13.3
  • Yoast SEO 13.4
  • Yoast SEO 13.5
  • Yoast SEO 14.0
  • Yoast SEO 14.0.1
  • Yoast SEO 14.0.2
  • Yoast SEO 14.0.3
  • Yoast SEO 14.0.4
  • Yoast SEO 14.1
  • Yoast SEO 14.2
  • Yoast SEO 14.3
  • Yoast SEO 14.4
  • Yoast SEO 14.4.1
  • Yoast SEO 14.5
  • Yoast SEO 14.6
  • Yoast SEO 14.6.1
  • Yoast SEO 14.7
  • Yoast SEO 14.8
  • Yoast SEO 14.8.1
  • Yoast SEO 14.9
  • Yoast SEO 15.0
  • Yoast SEO 15.1
  • Yoast SEO 15.1.1
  • Yoast SEO 15.2
  • Yoast SEO 15.2.1
  • Yoast SEO 15.3
  • Yoast SEO 15.4
  • Yoast SEO 15.5
  • Yoast SEO 15.6
  • Yoast SEO 15.6.1
  • Yoast SEO 15.6.2
  • Yoast SEO 15.7
  • Yoast SEO 15.8
  • Yoast SEO 15.9
  • Yoast SEO 15.9.1
  • Yoast SEO 15.9.2
  • Yoast SEO 16.0
  • Yoast SEO 16.0.1
  • Yoast SEO 16.0.2
  • Yoast SEO 16.1
  • Yoast SEO 16.1.1
  • Yoast SEO 16.2
  • Yoast SEO 16.3
  • Yoast SEO 16.4
  • Yoast SEO 16.5
  • Yoast SEO 16.6
  • Yoast SEO 16.6.1
  • Yoast SEO 16.7
  • Yoast SEO 16.7.1-slovak-hotfix
  • Yoast SEO 16.8
  • Yoast SEO 16.9
  • Yoast SEO 17.0
  • Yoast SEO 17.1
  • Yoast SEO 17.2
  • Yoast SEO 17.2.1
  • Yoast SEO 17.3
  • Yoast SEO 17.4
  • Yoast SEO 17.5
  • Yoast SEO 17.6
  • Yoast SEO 17.7
  • Yoast SEO 17.7.1
  • Yoast SEO 17.8
  • Yoast SEO 17.9
  • Yoast SEO 18.0
  • Yoast SEO 18.1
  • Yoast SEO 18.2
  • Yoast SEO 18.3
  • Yoast SEO 18.4
  • Yoast SEO 18.4.1
  • Yoast SEO 18.5
  • Yoast SEO 18.5.1
  • Yoast SEO 18.6
  • Yoast SEO 18.7
  • Yoast SEO 18.8
  • Yoast SEO 18.9
  • Yoast SEO 19.0
  • Yoast SEO 19.1
  • Yoast SEO 19.2
  • Yoast SEO 19.3
  • Yoast SEO 19.4
  • Yoast SEO 19.5
  • Yoast SEO 19.5.1
  • Yoast SEO 19.6
  • Yoast SEO 19.6.1
  • Yoast SEO 19.7
  • Yoast SEO 19.7.1
  • Yoast SEO 19.7.2
  • Yoast SEO 19.8
  • Yoast SEO 19.9
  • Yoast SEO 19.10
  • Yoast SEO 19.11

Incorrect permissions in configuration action

Edit user permission is not sufficiently checked in configuration action

This vulnerability affects the following application versions:

  • Yoast SEO 18.9
  • Yoast SEO 19.0
  • Yoast SEO 19.1
  • Yoast SEO 19.2
  • Yoast SEO 19.3
  • Yoast SEO 19.4
  • Yoast SEO 19.5
  • Yoast SEO 19.5.1
  • Yoast SEO 19.6
  • Yoast SEO 19.6.1
  • Yoast SEO 19.7
  • Yoast SEO 19.7.1
  • Yoast SEO 19.7.2
  • Yoast SEO 19.8
  • Yoast SEO 19.9
  • Yoast SEO 19.10
  • Yoast SEO 19.11
  • Yoast SEO 19.12
  • Yoast SEO 19.13
  • Yoast SEO 19.14
  • Yoast SEO 20.0
  • Yoast SEO 20.1

XSS in yoast form class

Variables in form class is not properly escaped to prevent an XSS attack

This vulnerability affects the following application versions:

  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0
  • Yoast SEO 11.1
  • Yoast SEO 11.1.1
  • Yoast SEO 11.2
  • Yoast SEO 11.2.1
  • Yoast SEO 11.3
  • Yoast SEO 11.4
  • Yoast SEO 11.5
  • Yoast SEO 11.6
  • Yoast SEO 11.7
  • Yoast SEO 11.8
  • Yoast SEO 11.9
  • Yoast SEO 12.0
  • Yoast SEO 12.1
  • Yoast SEO 12.2
  • Yoast SEO 12.3
  • Yoast SEO 12.4
  • Yoast SEO 12.5
  • Yoast SEO 12.5.1
  • Yoast SEO 12.6
  • Yoast SEO 12.6.1
  • Yoast SEO 12.6.2
  • Yoast SEO 12.7
  • Yoast SEO 12.7.1
  • Yoast SEO 12.8
  • Yoast SEO 12.8.1
  • Yoast SEO 12.9
  • Yoast SEO 12.9.1
  • Yoast SEO 13.0
  • Yoast SEO 13.1
  • Yoast SEO 13.2
  • Yoast SEO 13.3
  • Yoast SEO 13.4
  • Yoast SEO 13.5
  • Yoast SEO 14.0
  • Yoast SEO 14.0.1
  • Yoast SEO 14.0.2
  • Yoast SEO 14.0.3
  • Yoast SEO 14.0.4
  • Yoast SEO 14.1
  • Yoast SEO 14.2
  • Yoast SEO 14.3
  • Yoast SEO 14.4
  • Yoast SEO 14.4.1
  • Yoast SEO 14.5
  • Yoast SEO 14.6
  • Yoast SEO 14.6.1
  • Yoast SEO 14.7
  • Yoast SEO 14.8
  • Yoast SEO 14.8.1
  • Yoast SEO 14.9
  • Yoast SEO 15.0
  • Yoast SEO 15.1
  • Yoast SEO 15.1.1
  • Yoast SEO 15.2
  • Yoast SEO 15.2.1
  • Yoast SEO 15.3
  • Yoast SEO 15.4
  • Yoast SEO 15.5
  • Yoast SEO 15.6
  • Yoast SEO 15.6.1
  • Yoast SEO 15.6.2
  • Yoast SEO 15.7
  • Yoast SEO 15.8
  • Yoast SEO 15.9
  • Yoast SEO 15.9.1
  • Yoast SEO 15.9.2
  • Yoast SEO 16.0
  • Yoast SEO 16.0.1
  • Yoast SEO 16.0.2
  • Yoast SEO 16.1
  • Yoast SEO 16.1.1
  • Yoast SEO 16.2
  • Yoast SEO 16.3
  • Yoast SEO 16.4
  • Yoast SEO 16.5
  • Yoast SEO 16.6
  • Yoast SEO 16.6.1
  • Yoast SEO 16.7
  • Yoast SEO 16.7.1-slovak-hotfix
  • Yoast SEO 16.8
  • Yoast SEO 16.9
  • Yoast SEO 17.0
  • Yoast SEO 17.1
  • Yoast SEO 17.2
  • Yoast SEO 17.2.1
  • Yoast SEO 17.3
  • Yoast SEO 17.4
  • Yoast SEO 17.5
  • Yoast SEO 17.6
  • Yoast SEO 17.7
  • Yoast SEO 17.7.1
  • Yoast SEO 17.8
  • Yoast SEO 17.9
  • Yoast SEO 18.0
  • Yoast SEO 18.1
  • Yoast SEO 18.2
  • Yoast SEO 18.3
  • Yoast SEO 18.4
  • Yoast SEO 18.4.1
  • Yoast SEO 18.5
  • Yoast SEO 18.5.1
  • Yoast SEO 18.6
  • Yoast SEO 18.7
  • Yoast SEO 18.8
  • Yoast SEO 18.9
  • Yoast SEO 19.0
  • Yoast SEO 19.1
  • Yoast SEO 19.2
  • Yoast SEO 19.3
  • Yoast SEO 19.4
  • Yoast SEO 19.5
  • Yoast SEO 19.5.1
  • Yoast SEO 19.6
  • Yoast SEO 19.6.1

XSS in the image presenter of opengraph module

The image-presenter of the opengraph module is not properly escaped to prevent an XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 14.0
  • Yoast SEO 14.0.1
  • Yoast SEO 14.0.2
  • Yoast SEO 14.0.3
  • Yoast SEO 14.0.4
  • Yoast SEO 14.1
  • Yoast SEO 14.2
  • Yoast SEO 14.3
  • Yoast SEO 14.4
  • Yoast SEO 14.4.1
  • Yoast SEO 14.5
  • Yoast SEO 14.6
  • Yoast SEO 14.6.1
  • Yoast SEO 14.7
  • Yoast SEO 14.8
  • Yoast SEO 14.8.1
  • Yoast SEO 14.9
  • Yoast SEO 15.0
  • Yoast SEO 15.1
  • Yoast SEO 15.1.1
  • Yoast SEO 15.2
  • Yoast SEO 15.2.1
  • Yoast SEO 15.3
  • Yoast SEO 15.4
  • Yoast SEO 15.5
  • Yoast SEO 15.6
  • Yoast SEO 15.6.1
  • Yoast SEO 15.6.2
  • Yoast SEO 15.7
  • Yoast SEO 15.8
  • Yoast SEO 15.9
  • Yoast SEO 15.9.1
  • Yoast SEO 15.9.2
  • Yoast SEO 16.0
  • Yoast SEO 16.0.1
  • Yoast SEO 16.0.2
  • Yoast SEO 16.1
  • Yoast SEO 16.1.1
  • Yoast SEO 16.2
  • Yoast SEO 16.3
  • Yoast SEO 16.4
  • Yoast SEO 16.5
  • Yoast SEO 16.6
  • Yoast SEO 16.6.1
  • Yoast SEO 16.7
  • Yoast SEO 16.7.1-slovak-hotfix
  • Yoast SEO 16.8
  • Yoast SEO 16.9
  • Yoast SEO 17.0
  • Yoast SEO 17.1
  • Yoast SEO 17.2
  • Yoast SEO 17.2.1
  • Yoast SEO 17.3
  • Yoast SEO 17.4
  • Yoast SEO 17.5
  • Yoast SEO 17.6
  • Yoast SEO 17.7
  • Yoast SEO 17.7.1
  • Yoast SEO 17.8
  • Yoast SEO 17.9
  • Yoast SEO 18.0
  • Yoast SEO 18.1
  • Yoast SEO 18.2
  • Yoast SEO 18.3
  • Yoast SEO 18.4
  • Yoast SEO 18.4.1
  • Yoast SEO 18.5
  • Yoast SEO 18.5.1
  • Yoast SEO 18.6
  • Yoast SEO 18.7
  • Yoast SEO 18.8
  • Yoast SEO 18.9
  • Yoast SEO 19.0
  • Yoast SEO 19.1

XSS in Metabox

Input is not properly sanitized to prevent an XSS attack

This vulnerability affects the following application versions:

  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0
  • Yoast SEO 11.1
  • Yoast SEO 11.1.1
  • Yoast SEO 11.2
  • Yoast SEO 11.2.1
  • Yoast SEO 11.3
  • Yoast SEO 11.4
  • Yoast SEO 11.5
  • Yoast SEO 11.6
  • Yoast SEO 11.7
  • Yoast SEO 11.8
  • Yoast SEO 11.9
  • Yoast SEO 12.0
  • Yoast SEO 12.1
  • Yoast SEO 12.2
  • Yoast SEO 12.3
  • Yoast SEO 12.4
  • Yoast SEO 12.5
  • Yoast SEO 12.5.1
  • Yoast SEO 12.6
  • Yoast SEO 12.6.1
  • Yoast SEO 12.6.2
  • Yoast SEO 12.7
  • Yoast SEO 12.7.1
  • Yoast SEO 12.8
  • Yoast SEO 12.8.1
  • Yoast SEO 12.9
  • Yoast SEO 12.9.1
  • Yoast SEO 13.0
  • Yoast SEO 13.1
  • Yoast SEO 13.2
  • Yoast SEO 13.3
  • Yoast SEO 13.4
  • Yoast SEO 13.5
  • Yoast SEO 14.0
  • Yoast SEO 14.0.1
  • Yoast SEO 14.0.2
  • Yoast SEO 14.0.3
  • Yoast SEO 14.0.4
  • Yoast SEO 14.1
  • Yoast SEO 14.2
  • Yoast SEO 14.3
  • Yoast SEO 14.4
  • Yoast SEO 14.4.1
  • Yoast SEO 14.5
  • Yoast SEO 14.6
  • Yoast SEO 14.6.1
  • Yoast SEO 14.7
  • Yoast SEO 14.8
  • Yoast SEO 14.8.1
  • Yoast SEO 14.9
  • Yoast SEO 15.0
  • Yoast SEO 15.1
  • Yoast SEO 15.1.1
  • Yoast SEO 15.2
  • Yoast SEO 15.2.1
  • Yoast SEO 15.3
  • Yoast SEO 15.4
  • Yoast SEO 15.5
  • Yoast SEO 15.6
  • Yoast SEO 15.6.1
  • Yoast SEO 15.6.2
  • Yoast SEO 15.7
  • Yoast SEO 15.8
  • Yoast SEO 15.9
  • Yoast SEO 15.9.1
  • Yoast SEO 15.9.2
  • Yoast SEO 16.0
  • Yoast SEO 16.0.1
  • Yoast SEO 16.0.2
  • Yoast SEO 16.1
  • Yoast SEO 16.1.1
  • Yoast SEO 16.2
  • Yoast SEO 16.3
  • Yoast SEO 16.4
  • Yoast SEO 16.5
  • Yoast SEO 16.6
  • Yoast SEO 16.6.1
  • Yoast SEO 16.7
  • Yoast SEO 16.7.1-slovak-hotfix
  • Yoast SEO 16.8
  • Yoast SEO 16.9
  • Yoast SEO 17.0
  • Yoast SEO 17.1
  • Yoast SEO 17.2
  • Yoast SEO 17.2.1
  • Yoast SEO 17.3
  • Yoast SEO 17.4
  • Yoast SEO 17.5
  • Yoast SEO 17.6
  • Yoast SEO 17.7
  • Yoast SEO 17.7.1
  • Yoast SEO 17.8
  • Yoast SEO 17.9
  • Yoast SEO 18.0
  • Yoast SEO 18.1
  • Yoast SEO 18.2
  • Yoast SEO 18.3
  • Yoast SEO 18.4.1

Added escaping to sidebar and shop pages to prevent XSS

Sidebar and shop page weren’t properly escaped against XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0
  • Yoast SEO 11.1
  • Yoast SEO 11.1.1
  • Yoast SEO 11.2
  • Yoast SEO 11.2.1
  • Yoast SEO 11.3
  • Yoast SEO 11.4
  • Yoast SEO 11.5
  • Yoast SEO 11.6
  • Yoast SEO 11.7
  • Yoast SEO 11.8
  • Yoast SEO 11.9
  • Yoast SEO 12.0
  • Yoast SEO 12.1
  • Yoast SEO 12.2
  • Yoast SEO 12.3
  • Yoast SEO 12.4
  • Yoast SEO 12.5
  • Yoast SEO 12.5.1
  • Yoast SEO 12.6
  • Yoast SEO 12.6.1
  • Yoast SEO 12.6.2
  • Yoast SEO 12.7
  • Yoast SEO 12.7.1
  • Yoast SEO 12.8
  • Yoast SEO 12.8.1
  • Yoast SEO 12.9
  • Yoast SEO 12.9.1
  • Yoast SEO 13.0
  • Yoast SEO 13.1
  • Yoast SEO 13.2
  • Yoast SEO 13.3
  • Yoast SEO 13.4
  • Yoast SEO 13.5
  • Yoast SEO 14.0
  • Yoast SEO 14.0.1
  • Yoast SEO 14.0.2
  • Yoast SEO 14.0.3
  • Yoast SEO 14.0.4
  • Yoast SEO 14.1
  • Yoast SEO 14.2
  • Yoast SEO 14.3
  • Yoast SEO 14.4
  • Yoast SEO 14.4.1
  • Yoast SEO 14.5
  • Yoast SEO 14.6
  • Yoast SEO 14.6.1
  • Yoast SEO 14.7
  • Yoast SEO 14.8
  • Yoast SEO 14.8.1
  • Yoast SEO 14.9

Added escpaping to meta box expand message to prevent XSS

The meta box expand message wasn’t properly escaped against XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0
  • Yoast SEO 11.1
  • Yoast SEO 11.1.1
  • Yoast SEO 11.2
  • Yoast SEO 11.2.1
  • Yoast SEO 11.3
  • Yoast SEO 11.4
  • Yoast SEO 11.5
  • Yoast SEO 11.6
  • Yoast SEO 11.7
  • Yoast SEO 11.8
  • Yoast SEO 11.9
  • Yoast SEO 12.0
  • Yoast SEO 12.1
  • Yoast SEO 12.2
  • Yoast SEO 12.3
  • Yoast SEO 12.4
  • Yoast SEO 12.5
  • Yoast SEO 12.5.1
  • Yoast SEO 12.6
  • Yoast SEO 12.6.1
  • Yoast SEO 12.6.2
  • Yoast SEO 12.7
  • Yoast SEO 12.7.1
  • Yoast SEO 12.8
  • Yoast SEO 12.8.1
  • Yoast SEO 12.9
  • Yoast SEO 12.9.1
  • Yoast SEO 13.0
  • Yoast SEO 13.1
  • Yoast SEO 13.2
  • Yoast SEO 13.3
  • Yoast SEO 13.4
  • Yoast SEO 13.5
  • Yoast SEO 14.0
  • Yoast SEO 14.0.1
  • Yoast SEO 14.0.2
  • Yoast SEO 14.0.3
  • Yoast SEO 14.0.4
  • Yoast SEO 14.1
  • Yoast SEO 14.2
  • Yoast SEO 14.3
  • Yoast SEO 14.4
  • Yoast SEO 14.4.1
  • Yoast SEO 14.5
  • Yoast SEO 14.6
  • Yoast SEO 14.6.1
  • Yoast SEO 14.7

Cast user_id to int to prevent XSS

Introducing type casting to avoid XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0
  • Yoast SEO 11.1
  • Yoast SEO 11.1.1
  • Yoast SEO 11.2
  • Yoast SEO 11.2.1
  • Yoast SEO 11.3
  • Yoast SEO 11.4
  • Yoast SEO 11.5
  • Yoast SEO 11.6
  • Yoast SEO 11.7
  • Yoast SEO 11.8
  • Yoast SEO 11.9
  • Yoast SEO 12.0
  • Yoast SEO 12.1
  • Yoast SEO 12.2
  • Yoast SEO 12.3
  • Yoast SEO 12.4
  • Yoast SEO 12.5
  • Yoast SEO 12.5.1
  • Yoast SEO 12.6
  • Yoast SEO 12.6.1
  • Yoast SEO 12.6.2
  • Yoast SEO 12.7
  • Yoast SEO 12.7.1
  • Yoast SEO 12.8
  • Yoast SEO 12.8.1
  • Yoast SEO 12.9
  • Yoast SEO 12.9.1
  • Yoast SEO 13.0
  • Yoast SEO 13.1
  • Yoast SEO 13.2
  • Yoast SEO 13.3
  • Yoast SEO 13.4
  • Yoast SEO 13.5
  • Yoast SEO 14.0
  • Yoast SEO 14.0.1
  • Yoast SEO 14.0.2
  • Yoast SEO 14.0.3
  • Yoast SEO 14.0.4
  • Yoast SEO 14.1
  • Yoast SEO 14.2
  • Yoast SEO 14.3

Adding escaping to specific invalid value message to avoid XSS

A specific invalid value message wasn’t properly escaped against XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 12.1
  • Yoast SEO 12.2
  • Yoast SEO 12.3
  • Yoast SEO 12.4
  • Yoast SEO 12.5
  • Yoast SEO 12.5.1
  • Yoast SEO 12.6
  • Yoast SEO 12.6.1
  • Yoast SEO 12.6.2
  • Yoast SEO 12.7
  • Yoast SEO 12.7.1
  • Yoast SEO 12.8
  • Yoast SEO 12.8.1
  • Yoast SEO 12.9
  • Yoast SEO 12.9.1
  • Yoast SEO 13.0
  • Yoast SEO 13.1
  • Yoast SEO 13.2
  • Yoast SEO 13.3
  • Yoast SEO 13.4
  • Yoast SEO 13.5
  • Yoast SEO 14.0
  • Yoast SEO 14.0.1
  • Yoast SEO 14.0.2
  • Yoast SEO 14.0.3
  • Yoast SEO 14.0.4
  • Yoast SEO 14.1

Adding escaping to admin url for general options to prevent XSS

The admin url for general options was not properly escaped against XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0
  • Yoast SEO 11.1
  • Yoast SEO 11.1.1
  • Yoast SEO 11.2
  • Yoast SEO 11.2.1
  • Yoast SEO 11.3
  • Yoast SEO 11.4
  • Yoast SEO 11.5
  • Yoast SEO 11.6
  • Yoast SEO 11.7
  • Yoast SEO 11.8
  • Yoast SEO 11.9
  • Yoast SEO 12.0
  • Yoast SEO 12.1
  • Yoast SEO 12.2
  • Yoast SEO 12.3
  • Yoast SEO 12.4
  • Yoast SEO 12.5
  • Yoast SEO 12.5.1
  • Yoast SEO 12.6
  • Yoast SEO 12.6.1
  • Yoast SEO 12.6.2
  • Yoast SEO 12.7
  • Yoast SEO 12.7.1
  • Yoast SEO 12.8
  • Yoast SEO 12.8.1
  • Yoast SEO 12.9
  • Yoast SEO 12.9.1
  • Yoast SEO 13.0
  • Yoast SEO 13.1
  • Yoast SEO 13.2
  • Yoast SEO 13.3
  • Yoast SEO 13.4
  • Yoast SEO 13.5
  • Yoast SEO 14.0
  • Yoast SEO 14.0.1
  • Yoast SEO 14.0.2
  • Yoast SEO 14.0.3
  • Yoast SEO 14.0.4

Escaping added to attribute and URL to avoid XSS

Attribute and URL were not properly escaped.

This vulnerability affects the following application versions:

  • Yoast SEO 11.4
  • Yoast SEO 11.5
  • Yoast SEO 11.6
  • Yoast SEO 11.7
  • Yoast SEO 11.8
  • Yoast SEO 11.9
  • Yoast SEO 12.0
  • Yoast SEO 12.1
  • Yoast SEO 12.2
  • Yoast SEO 12.3
  • Yoast SEO 12.4
  • Yoast SEO 12.5
  • Yoast SEO 12.5.1
  • Yoast SEO 12.6
  • Yoast SEO 12.6.1
  • Yoast SEO 12.6.2

Adding key sanitation for attributes to prevent XSS

Attributes were not properly sanitized as keys to prevent XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0
  • Yoast SEO 11.1
  • Yoast SEO 11.1.1
  • Yoast SEO 11.2
  • Yoast SEO 11.2.1
  • Yoast SEO 11.3
  • Yoast SEO 11.4
  • Yoast SEO 11.5
  • Yoast SEO 11.6
  • Yoast SEO 11.7
  • Yoast SEO 11.8
  • Yoast SEO 11.9
  • Yoast SEO 12.0
  • Yoast SEO 12.1
  • Yoast SEO 12.2
  • Yoast SEO 12.3

Adding escaping to FAQ and how-to’s to prevent XSS

Name and Json data were not properly escaped against XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0
  • Yoast SEO 11.1
  • Yoast SEO 11.1.1
  • Yoast SEO 11.2
  • Yoast SEO 11.2.1
  • Yoast SEO 11.3
  • Yoast SEO 11.4
  • Yoast SEO 11.5
  • Yoast SEO 11.6
  • Yoast SEO 11.7
  • Yoast SEO 11.8
  • Yoast SEO 11.9
  • Yoast SEO 12.0
  • Yoast SEO 12.1
  • Yoast SEO 12.2
  • Yoast SEO 12.3

Escaping import/export tool to prevent XSS

The import and export tool was not properly escaped against XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0
  • Yoast SEO 11.1
  • Yoast SEO 11.1.1
  • Yoast SEO 11.2
  • Yoast SEO 11.2.1
  • Yoast SEO 11.3
  • Yoast SEO 11.4
  • Yoast SEO 11.5
  • Yoast SEO 11.6
  • Yoast SEO 11.7
  • Yoast SEO 11.8
  • Yoast SEO 11.9
  • Yoast SEO 12.0
  • Yoast SEO 12.1

Escaping admin tool section to prevent XSS

The admin tool page was not properly escaped against an XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0
  • Yoast SEO 11.1
  • Yoast SEO 11.1.1
  • Yoast SEO 11.2
  • Yoast SEO 11.2.1
  • Yoast SEO 11.3
  • Yoast SEO 11.4
  • Yoast SEO 11.5
  • Yoast SEO 11.6
  • Yoast SEO 11.7
  • Yoast SEO 11.8
  • Yoast SEO 11.9

Escaping collapsible metabox section to prevent XSS

The collapsible and metabox section were not properly escaped against XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0
  • Yoast SEO 11.1
  • Yoast SEO 11.1.1
  • Yoast SEO 11.2
  • Yoast SEO 11.2.1
  • Yoast SEO 11.3
  • Yoast SEO 11.4
  • Yoast SEO 11.5
  • Yoast SEO 11.6
  • Yoast SEO 11.7
  • Yoast SEO 11.8

Add escaping to different admin sections to prevent XSS

Various admin sections were not properly sanitized against XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 1.5.5
  • Yoast SEO 1.5.5.1
  • Yoast SEO 1.5.5.2
  • Yoast SEO 1.5.5.3
  • Yoast SEO 1.5.6
  • Yoast SEO 1.6
  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0
  • Yoast SEO 11.1
  • Yoast SEO 11.1.1
  • Yoast SEO 11.2
  • Yoast SEO 11.2.1
  • Yoast SEO 11.3
  • Yoast SEO 11.4
  • Yoast SEO 11.5
  • Yoast SEO 11.6
  • Yoast SEO 11.7
  • Yoast SEO 11.8

Escaping license file to prevent XSS

Licenses file was not properly escaped against XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0

Added escaping to admin views to avoid XSS

A range of elements were not properly escaped against a possible XSS attack.

This vulnerability affects the following application versions:

  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1
  • Yoast SEO 10.1
  • Yoast SEO 10.1.1
  • Yoast SEO 10.1.2
  • Yoast SEO 10.1.3
  • Yoast SEO 11.0
  • Yoast SEO 11.1
  • Yoast SEO 11.1.1

Explicitly convert to an integer to prevent code injection

The blog id was not specifically type casting and that could lead to code injection.

This vulnerability affects the following application versions:

  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6
  • Yoast SEO 9.7
  • Yoast SEO 10.0
  • Yoast SEO 10.0.1

Added escaping to notifier to prevent XSS

Certain forms and links were not properly escaped to against XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3

Added escaping to metabox text field to prevent XSS

Certain inputs were not properly escaped against an XSS attack.

This vulnerability affects the following application versions:

  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5

Added escaping in the columns link to prevent XSS

The link in the column was not properly escaped against XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5
  • Yoast SEO 9.6

Sitemap sanitation added to avoid XSS

The sitemap request server was not properly sanitized against XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4

Add sanitation to Input variables in the bulk editor and ajax module to prevent XSS

Input variables in the bulk editor and ajax module were vulnerable to XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 1.5.5
  • Yoast SEO 1.5.5.1
  • Yoast SEO 1.5.5.2
  • Yoast SEO 1.5.5.3
  • Yoast SEO 1.5.6
  • Yoast SEO 1.6
  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5

Escaping of HTML chars to prevent XSS

Unescaped html chars could lead to a possible XSS attack.

This vulnerability affects the following application versions:

  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5

Escaping promo extension message to prevent XSS

The promo extension messages were not properly escaped which could result in an XSS attack.

This vulnerability affects the following application versions:

  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5

Escaping html chars to prevent XSS

Unescaped html chars at the frontend could result into an XSS attack.

This vulnerability affects the following application versions:

  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5

Sanitation of text fields to prevent XSS

Some input fields were not properly sanitized against XSS attack.

This vulnerability affects the following application versions:

  • Yoast SEO 1.5.5
  • Yoast SEO 1.5.5.1
  • Yoast SEO 1.5.5.2
  • Yoast SEO 1.5.5.3
  • Yoast SEO 1.5.6
  • Yoast SEO 1.6
  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5

Added an escape in the SEO configuration wizard to prevent XSS

Added an escape In the administrator SEO configuration wizard step 6 to prevent XSS

This vulnerability affects the following application versions:

  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5

Added escaping to archives to prevent XSS

Added escaping for “Author archives” and “Special Pages”.

This vulnerability affects the following application versions:

  • Yoast SEO 1.6
  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4

Adding escapes to Yoast SEO bulk editor, tabs, google search console and metabox to avoid XSS

Some attributes and elements were not properly escaped in the tab options, bulk editor, google search console, metabox and upsells.

This vulnerability affects the following application versions:

  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3

Added escapes to knowledge graph to prevent XSS

Added esc_html_ as escape.

This vulnerability affects the following application versions:

  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4

Adding escape to prevent XSS – 1

XSS vulnerabilities were found in some input and edit fields.

This vulnerability affects the following application versions:

  • Yoast SEO 1.5.5
  • Yoast SEO 1.5.5.1
  • Yoast SEO 1.5.5.2
  • Yoast SEO 1.5.5.3
  • Yoast SEO 1.5.6
  • Yoast SEO 1.6
  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1

Escape added for Custom Post Type Archives to prevent XSS

Added esc_html__ to escape.

This vulnerability affects the following application versions:

  • Yoast SEO 1.6
  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4

Added escaping on the social profiles intro text to avoid XSS

Social Profiles had been exposed to possible XSS when a user tried to configure the plugin.

This vulnerability affects the following application versions:

  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5

Escaping added for input value upload image to prevent XSS

Added escape esc_attr__.

This vulnerability affects the following application versions:

  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2

Adding escape to prevent XSS – 2

XSS vulnerabilities were found in some input and edit fields.

This vulnerability affects the following application versions:

  • Yoast SEO 1.5.4.2
  • Yoast SEO 1.5.5
  • Yoast SEO 1.5.5.1
  • Yoast SEO 1.5.5.2
  • Yoast SEO 1.5.5.3
  • Yoast SEO 1.5.6
  • Yoast SEO 1.6
  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1

Escaping the homepage meta description to prevent XSS

The homepage meta description was not escaped properly from an XSS attack.

This vulnerability affects the following application versions:

  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4

Yoast notification escape

The Yoast notification message type was not properly escaped against XSS attack.

This vulnerability affects the following application versions:

  • Yoast SEO 1.5.3
  • Yoast SEO 1.5.3.1
  • Yoast SEO 1.5.3.2
  • Yoast SEO 1.5.3.3
  • Yoast SEO 1.5.4
  • Yoast SEO 1.5.4.1
  • Yoast SEO 1.5.4.2
  • Yoast SEO 1.5.5
  • Yoast SEO 1.5.5.1
  • Yoast SEO 1.5.5.2
  • Yoast SEO 1.5.5.3
  • Yoast SEO 1.5.6
  • Yoast SEO 1.6
  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1

Sanitation of text field, host name and server name to prevent XSS

Text field, host name and server name was not properly sanitized when redirecting the sitemap xml.

This vulnerability affects the following application versions:

  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2

Add an escape for the Facebook upload image button to prevent XSS

Add an escape for the Yoast SEO settings Facebook upload image button, which can be found in the category detail page to prevent XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2

Add better file path checking for images

Improving of file path check.

This vulnerability affects the following application versions:

  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4

Added several escapes for the social and sitemap management pages to prevent XSS

Added several escapes for the social, meta columns, lincenses and sitemap management pages to prevent XSS

This vulnerability affects the following application versions:

  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2

Added escape to the label value of toggle switch to prevent XSS

Added escape is esc_html.

This vulnerability affects the following application versions:

  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1

Added serveral strip all tags in the admin trackin plugin, frontend class and breadcrumbs class to prevent XSS

Changed escaping into wp_strip_all_tags().

This vulnerability affects the following application versions:

  • Yoast SEO 1.5.5.2
  • Yoast SEO 1.5.5.3
  • Yoast SEO 1.5.6
  • Yoast SEO 1.6
  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1

Added several escapes to the bulk editor to prevent XSS

Added several escapes to the bulk editor

This vulnerability affects the following application versions:

  • Yoast SEO 1.5.5
  • Yoast SEO 1.5.5.1
  • Yoast SEO 1.5.5.2
  • Yoast SEO 1.5.5.3
  • Yoast SEO 1.5.6
  • Yoast SEO 1.6
  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1

Escaping of HTML tags in the admin banner sidebar to prevent XSS

Not properly escaped HTML tags at admin sidebar banner could result in an XSS attack.

This vulnerability affects the following application versions:

  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3

Add several escapes in the frontend RSS widget to avoid XSS

Add several escapes in the RSS-widget for the front-end design part to avoid XSS

This vulnerability affects the following application versions:

  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3

Adding escaping to the homepage to prevent XSS

The metadata of the homepage was not properly prevented from XSS attack.

This vulnerability affects the following application versions:

  • Yoast SEO 1.6
  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4

Use strict comparision of the current user to prevent that the user changes posts other than his own

The patch forces a strict comparison of the user ID to prevent that the user with limited rights could change posts from other users.

This vulnerability affects the following application versions:

  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8

Add several escapes in the administrator XML user sitemap settings

Add several escapes in the administrator page for the XML sitemaps user sitemap settings and the filter specific user roles.

This vulnerability affects the following application versions:

  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4

Adding possibility of password protected images in posts to avoid leaking protected data

Data could not correctly be protected.

This vulnerability affects the following application versions:

  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3

Added escaping to meta options help center to prevent XSS

The meta options in the help center were vulnerable to XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1

Changed the link processor from site-URL to home-URL

Inside the WYSWYG editor was it possible to insert internal links to other pages in the website, the internal link is changed from site url to home Url

This vulnerability affects the following application versions:

  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0

Revokes the manage options capability from administrator users

Users’ capability was not properly handled against the manage options permission.

This vulnerability affects the following application versions:

  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1

Change rand function to a more secure function wp_rand to harden it

Change rand function to a more secure wp_rand while creating Facebook connect key.

This vulnerability affects the following application versions:

  • Yoast SEO 1.6
  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2

Add several escapes in the admin import export and feature pages to avoid XSS

Add several escapes in the back-end SEO import and export and feature pages to avoid XSS.

This vulnerability affects the following application versions:

  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2

Password protected post excerpt was accessible without the password

Add password check to posts.

This vulnerability affects the following application versions:

  • Yoast SEO 1.6
  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2

Sanitation input from text field to prevent XSS

The input from $_SERVER[] was not properly sanitised against XSS attack.

This vulnerability affects the following application versions:

  • Yoast SEO 1.6.1
  • Yoast SEO 1.6.2
  • Yoast SEO 1.6.3
  • Yoast SEO 1.7
  • Yoast SEO 1.7.1
  • Yoast SEO 2.0
  • Yoast SEO 2.0.1
  • Yoast SEO 2.1
  • Yoast SEO 2.1.1
  • Yoast SEO 2.2
  • Yoast SEO 2.2.1
  • Yoast SEO 2.3
  • Yoast SEO 2.3.1
  • Yoast SEO 2.3.2
  • Yoast SEO 2.3.3
  • Yoast SEO 2.3.4
  • Yoast SEO 2.3.5
  • Yoast SEO 3.0
  • Yoast SEO 3.0.1
  • Yoast SEO 3.0.2
  • Yoast SEO 3.0.3
  • Yoast SEO 3.0.4
  • Yoast SEO 3.0.5
  • Yoast SEO 3.0.6
  • Yoast SEO 3.0.7
  • Yoast SEO 3.1
  • Yoast SEO 3.1.1
  • Yoast SEO 3.1.2
  • Yoast SEO 3.2
  • Yoast SEO 3.2.1
  • Yoast SEO 3.2.2
  • Yoast SEO 3.2.3
  • Yoast SEO 3.2.4
  • Yoast SEO 3.2.5
  • Yoast SEO 3.3.0
  • Yoast SEO 3.3.1
  • Yoast SEO 3.3.2
  • Yoast SEO 3.3.3
  • Yoast SEO 3.3.4
  • Yoast SEO 3.4
  • Yoast SEO 3.4.1
  • Yoast SEO 3.4.2
  • Yoast SEO 3.5
  • Yoast SEO 3.6
  • Yoast SEO 3.6.1
  • Yoast SEO 3.7.0
  • Yoast SEO 3.7.1
  • Yoast SEO 3.8
  • Yoast SEO 3.9
  • Yoast SEO 4.0
  • Yoast SEO 4.0.2
  • Yoast SEO 4.1
  • Yoast SEO 4.2
  • Yoast SEO 4.2.1
  • Yoast SEO 4.3
  • Yoast SEO 4.4
  • Yoast SEO 4.5
  • Yoast SEO 4.6
  • Yoast SEO 4.7
  • Yoast SEO 4.7.1
  • Yoast SEO 4.8
  • Yoast SEO 4.9
  • Yoast SEO 5.0
  • Yoast SEO 5.0.1
  • Yoast SEO 5.0.2
  • Yoast SEO 5.1
  • Yoast SEO 5.2
  • Yoast SEO 5.3
  • Yoast SEO 5.3.1
  • Yoast SEO 5.3.2
  • Yoast SEO 5.3.3
  • Yoast SEO 5.4.0
  • Yoast SEO 5.4.1
  • Yoast SEO 5.4.2
  • Yoast SEO 5.5
  • Yoast SEO 5.5.1
  • Yoast SEO 5.6
  • Yoast SEO 5.6.1
  • Yoast SEO 5.7
  • Yoast SEO 5.7.1
  • Yoast SEO 5.8
  • Yoast SEO 5.9
  • Yoast SEO 5.9.1
  • Yoast SEO 5.9.2
  • Yoast SEO 5.9.3
  • Yoast SEO 6.0
  • Yoast SEO 6.1
  • Yoast SEO 6.1.1
  • Yoast SEO 6.2
  • Yoast SEO 6.3
  • Yoast SEO 6.3.1
  • Yoast SEO 7.0
  • Yoast SEO 7.0.1
  • Yoast SEO 7.0.2
  • Yoast SEO 7.0.3
  • Yoast SEO 7.1
  • Yoast SEO 7.2
  • Yoast SEO 7.3
  • Yoast SEO 7.4
  • Yoast SEO 7.4.1
  • Yoast SEO 7.4.2
  • Yoast SEO 7.5
  • Yoast SEO 7.5.1
  • Yoast SEO 7.5.3
  • Yoast SEO 7.6
  • Yoast SEO 7.6.1
  • Yoast SEO 7.7
  • Yoast SEO 7.7.1
  • Yoast SEO 7.7.2
  • Yoast SEO 7.7.3
  • Yoast SEO 7.8
  • Yoast SEO 7.9
  • Yoast SEO 7.9.1
  • Yoast SEO 8.0
  • Yoast SEO 8.1
  • Yoast SEO 8.1.1
  • Yoast SEO 8.1.2
  • Yoast SEO 8.2
  • Yoast SEO 8.2.1
  • Yoast SEO 8.3
  • Yoast SEO 8.4
  • Yoast SEO 9.0
  • Yoast SEO 9.0.1
  • Yoast SEO 9.0.2
  • Yoast SEO 9.0.3
  • Yoast SEO 9.1
  • Yoast SEO 9.2
  • Yoast SEO 9.2.1
  • Yoast SEO 9.3
  • Yoast SEO 9.4
  • Yoast SEO 9.5