Yoast SEO Archives - Standoutmedia A/S

Fix unauthorized access to post metadata

Skrevet den 27. januar 2026 af i Yoast SEO

Ensures users without the required capabilities cannot read post metadata they are not permitted to access.

This vulnerability affects the following application versions:

Yoast SEO 19.6
Yoast SEO 19.6.1
Yoast SEO 19.7
Yoast SEO 19.7.1
Yoast SEO 19.7.2
Yoast SEO 19.8
Yoast SEO 19.9
Yoast SEO 19.10
Yoast SEO 19.11
Yoast SEO 19.12
Yoast SEO 19.13
Yoast SEO 19.14
Yoast SEO 20.0
Yoast SEO 20.1
Yoast SEO 20.2
Yoast SEO 20.2.1
Yoast SEO 20.3
Yoast SEO 20.4
Yoast SEO 20.5
Yoast SEO 20.6
Yoast SEO 20.7
Yoast SEO 20.8
Yoast SEO 20.9
Yoast SEO 20.10
Yoast SEO 20.11
Yoast SEO 20.12
Yoast SEO 20.13
Yoast SEO 21.0
Yoast SEO 21.1
Yoast SEO 21.2
Yoast SEO 21.3
Yoast SEO 21.4
Yoast SEO 21.5
Yoast SEO 21.6
Yoast SEO 21.7
Yoast SEO 21.8
Yoast SEO 21.8.1
Yoast SEO 21.9
Yoast SEO 21.9.1
Yoast SEO 22.0
Yoast SEO 22.1
Yoast SEO 22.2
Yoast SEO 22.3
Yoast SEO 22.4
Yoast SEO 22.5
Yoast SEO 22.6
Yoast SEO 22.7
Yoast SEO 22.8
Yoast SEO 22.9
Yoast SEO 23.0
Yoast SEO 23.1
Yoast SEO 23.2
Yoast SEO 23.3
Yoast SEO 23.4
Yoast SEO 23.5
Yoast SEO 23.6
Yoast SEO 23.7
Yoast SEO 23.8
Yoast SEO 23.9
Yoast SEO 24.0
Yoast SEO 24.1
Yoast SEO 24.2
Yoast SEO 24.3
Yoast SEO 24.4
Yoast SEO 24.5
Yoast SEO 24.6
Yoast SEO 24.7
Yoast SEO 24.8
Yoast SEO 24.8.1
Yoast SEO 24.9
Yoast SEO 25.0
Yoast SEO 25.1
Yoast SEO 25.2
Yoast SEO 25.3
Yoast SEO 25.3.1
Yoast SEO 25.4
Yoast SEO 25.5
Yoast SEO 25.6
Yoast SEO 25.7
Yoast SEO 25.8
Yoast SEO 25.9
Yoast SEO 26.0
Yoast SEO 26.1
Yoast SEO 26.1.1
Yoast SEO 26.2
Yoast SEO 26.3
Yoast SEO 26.4
Yoast SEO 26.5

XSS in the admin bar menu

Skrevet den 28. maj 202418. oktober 2025 af i Yoast SEO

Esacpes strings when outputting them in the view at admin bar menu

This vulnerability affects the following application versions:

Yoast SEO 19.12
Yoast SEO 19.13
Yoast SEO 19.14
Yoast SEO 20.0
Yoast SEO 20.1
Yoast SEO 20.2
Yoast SEO 20.2.1
Yoast SEO 20.3
Yoast SEO 20.4
Yoast SEO 20.5
Yoast SEO 20.6
Yoast SEO 20.7
Yoast SEO 20.8
Yoast SEO 20.9
Yoast SEO 20.10
Yoast SEO 20.11
Yoast SEO 20.12
Yoast SEO 20.13
Yoast SEO 21.0
Yoast SEO 21.1
Yoast SEO 21.2
Yoast SEO 21.3
Yoast SEO 21.4
Yoast SEO 21.5
Yoast SEO 21.6
Yoast SEO 21.7
Yoast SEO 21.8
Yoast SEO 21.8.1
Yoast SEO 21.9
Yoast SEO 21.9.1
Yoast SEO 22.0
Yoast SEO 22.1
Yoast SEO 22.2
Yoast SEO 22.3
Yoast SEO 22.4
Yoast SEO 22.5

XSS attack in search query

Skrevet den 15. marts 202418. oktober 2025 af i Yoast SEO

Prevents XSS attack in url when using the search query

This vulnerability affects the following application versions:

Yoast SEO 17.4
Yoast SEO 17.5
Yoast SEO 17.6
Yoast SEO 17.7
Yoast SEO 17.7.1
Yoast SEO 17.8
Yoast SEO 17.9
Yoast SEO 18.0
Yoast SEO 18.1
Yoast SEO 18.2
Yoast SEO 18.3
Yoast SEO 18.4
Yoast SEO 18.4.1
Yoast SEO 18.5
Yoast SEO 18.5.1
Yoast SEO 18.6
Yoast SEO 18.7
Yoast SEO 18.8
Yoast SEO 18.9
Yoast SEO 19.0
Yoast SEO 19.1
Yoast SEO 19.2
Yoast SEO 19.3
Yoast SEO 19.4
Yoast SEO 19.5
Yoast SEO 19.5.1
Yoast SEO 19.6
Yoast SEO 19.6.1
Yoast SEO 19.7
Yoast SEO 19.7.1
Yoast SEO 19.7.2
Yoast SEO 19.8
Yoast SEO 19.9
Yoast SEO 19.10
Yoast SEO 19.11
Yoast SEO 19.12
Yoast SEO 19.13
Yoast SEO 19.14
Yoast SEO 20.0
Yoast SEO 20.1
Yoast SEO 20.2
Yoast SEO 20.2.1
Yoast SEO 20.3
Yoast SEO 20.4
Yoast SEO 20.5
Yoast SEO 20.6
Yoast SEO 20.7
Yoast SEO 20.8
Yoast SEO 20.9
Yoast SEO 20.10
Yoast SEO 20.11
Yoast SEO 20.12
Yoast SEO 20.13
Yoast SEO 21.0
Yoast SEO 21.1
Yoast SEO 21.2
Yoast SEO 21.3
Yoast SEO 21.4
Yoast SEO 21.5
Yoast SEO 21.6
Yoast SEO 21.7
Yoast SEO 21.8
Yoast SEO 21.8.1
Yoast SEO 21.9
Yoast SEO 21.9.1
Yoast SEO 22.0

XSS in the dismiss plugin

Skrevet den 8. januar 202418. oktober 2025 af i Yoast SEO

The dismiss plugin conflict is not properly sanitized against an XSS attack.

This vulnerability affects the following application versions:

Yoast SEO 2.3.3
Yoast SEO 2.3.4
Yoast SEO 2.3.5
Yoast SEO 3.0
Yoast SEO 3.0.1
Yoast SEO 3.0.2
Yoast SEO 3.0.3
Yoast SEO 3.0.4
Yoast SEO 3.0.5
Yoast SEO 3.0.6
Yoast SEO 3.0.7
Yoast SEO 3.1
Yoast SEO 3.1.1
Yoast SEO 3.1.2
Yoast SEO 3.2
Yoast SEO 3.2.1
Yoast SEO 3.2.2
Yoast SEO 3.2.3
Yoast SEO 3.2.4
Yoast SEO 3.2.5
Yoast SEO 3.3.0
Yoast SEO 3.3.1
Yoast SEO 3.3.2
Yoast SEO 3.3.3
Yoast SEO 3.3.4
Yoast SEO 3.4
Yoast SEO 3.4.1
Yoast SEO 3.4.2
Yoast SEO 3.5
Yoast SEO 3.6
Yoast SEO 3.6.1
Yoast SEO 3.7.0
Yoast SEO 3.7.1
Yoast SEO 3.8
Yoast SEO 3.9
Yoast SEO 4.0
Yoast SEO 4.0.2
Yoast SEO 4.1
Yoast SEO 4.2
Yoast SEO 4.2.1
Yoast SEO 4.3
Yoast SEO 4.4
Yoast SEO 4.5
Yoast SEO 4.6
Yoast SEO 4.7
Yoast SEO 4.7.1
Yoast SEO 4.8
Yoast SEO 4.9
Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1
Yoast SEO 10.1
Yoast SEO 10.1.1
Yoast SEO 10.1.2
Yoast SEO 10.1.3
Yoast SEO 11.0
Yoast SEO 11.1
Yoast SEO 11.1.1
Yoast SEO 11.2
Yoast SEO 11.2.1
Yoast SEO 11.3
Yoast SEO 11.4
Yoast SEO 11.5
Yoast SEO 11.6
Yoast SEO 11.7
Yoast SEO 11.8
Yoast SEO 11.9
Yoast SEO 12.0
Yoast SEO 12.1
Yoast SEO 12.2
Yoast SEO 12.3
Yoast SEO 12.4
Yoast SEO 12.5
Yoast SEO 12.5.1
Yoast SEO 12.6
Yoast SEO 12.6.1
Yoast SEO 12.6.2
Yoast SEO 12.7
Yoast SEO 12.7.1
Yoast SEO 12.8
Yoast SEO 12.8.1
Yoast SEO 12.9
Yoast SEO 12.9.1
Yoast SEO 13.0
Yoast SEO 13.1
Yoast SEO 13.2
Yoast SEO 13.3
Yoast SEO 13.4
Yoast SEO 13.5
Yoast SEO 14.0
Yoast SEO 14.0.1
Yoast SEO 14.0.2
Yoast SEO 14.0.3
Yoast SEO 14.0.4
Yoast SEO 14.1
Yoast SEO 14.2
Yoast SEO 14.3
Yoast SEO 14.4
Yoast SEO 14.4.1
Yoast SEO 14.5
Yoast SEO 14.6
Yoast SEO 14.6.1
Yoast SEO 14.7
Yoast SEO 14.8
Yoast SEO 14.8.1
Yoast SEO 14.9
Yoast SEO 15.0
Yoast SEO 15.1
Yoast SEO 15.1.1
Yoast SEO 15.2
Yoast SEO 15.2.1
Yoast SEO 15.3
Yoast SEO 15.4
Yoast SEO 15.5
Yoast SEO 15.6
Yoast SEO 15.6.1
Yoast SEO 15.6.2
Yoast SEO 15.7
Yoast SEO 15.8
Yoast SEO 15.9
Yoast SEO 15.9.1
Yoast SEO 15.9.2
Yoast SEO 16.0
Yoast SEO 16.0.1
Yoast SEO 16.0.2
Yoast SEO 16.1
Yoast SEO 16.1.1
Yoast SEO 16.2
Yoast SEO 16.3
Yoast SEO 16.4
Yoast SEO 16.5
Yoast SEO 16.6
Yoast SEO 16.6.1
Yoast SEO 16.7
Yoast SEO 16.7.1-slovak-hotfix
Yoast SEO 16.8
Yoast SEO 16.9
Yoast SEO 17.0
Yoast SEO 17.1
Yoast SEO 17.2
Yoast SEO 17.2.1
Yoast SEO 17.3
Yoast SEO 17.4
Yoast SEO 17.5
Yoast SEO 17.6
Yoast SEO 17.7
Yoast SEO 17.7.1
Yoast SEO 17.8
Yoast SEO 17.9
Yoast SEO 18.0
Yoast SEO 18.1
Yoast SEO 18.2
Yoast SEO 18.3
Yoast SEO 18.4
Yoast SEO 18.4.1
Yoast SEO 18.5
Yoast SEO 18.5.1
Yoast SEO 18.6
Yoast SEO 18.7
Yoast SEO 18.8
Yoast SEO 18.9
Yoast SEO 19.0
Yoast SEO 19.1
Yoast SEO 19.2
Yoast SEO 19.3
Yoast SEO 19.4
Yoast SEO 19.5
Yoast SEO 19.5.1
Yoast SEO 19.6
Yoast SEO 19.6.1
Yoast SEO 19.7
Yoast SEO 19.7.1
Yoast SEO 19.7.2
Yoast SEO 19.8
Yoast SEO 19.9
Yoast SEO 19.10
Yoast SEO 19.11

Incorrect permissions in configuration action

Skrevet den 2. maj 202318. oktober 2025 af i Yoast SEO

Edit user permission is not sufficiently checked in configuration action

This vulnerability affects the following application versions:

Yoast SEO 18.9
Yoast SEO 19.0
Yoast SEO 19.1
Yoast SEO 19.2
Yoast SEO 19.3
Yoast SEO 19.4
Yoast SEO 19.5
Yoast SEO 19.5.1
Yoast SEO 19.6
Yoast SEO 19.6.1
Yoast SEO 19.7
Yoast SEO 19.7.1
Yoast SEO 19.7.2
Yoast SEO 19.8
Yoast SEO 19.9
Yoast SEO 19.10
Yoast SEO 19.11
Yoast SEO 19.12
Yoast SEO 19.13
Yoast SEO 19.14
Yoast SEO 20.0
Yoast SEO 20.1

XSS in yoast form class

Skrevet den 30. november 202218. oktober 2025 af i Yoast SEO

Variables in form class is not properly escaped to prevent an XSS attack

This vulnerability affects the following application versions:

Yoast SEO 2.0
Yoast SEO 2.0.1
Yoast SEO 2.1
Yoast SEO 2.1.1
Yoast SEO 2.2
Yoast SEO 2.2.1
Yoast SEO 2.3
Yoast SEO 2.3.1
Yoast SEO 2.3.2
Yoast SEO 2.3.3
Yoast SEO 2.3.4
Yoast SEO 2.3.5
Yoast SEO 3.0
Yoast SEO 3.0.1
Yoast SEO 3.0.2
Yoast SEO 3.0.3
Yoast SEO 3.0.4
Yoast SEO 3.0.5
Yoast SEO 3.0.6
Yoast SEO 3.0.7
Yoast SEO 3.1
Yoast SEO 3.1.1
Yoast SEO 3.1.2
Yoast SEO 3.2
Yoast SEO 3.2.1
Yoast SEO 3.2.2
Yoast SEO 3.2.3
Yoast SEO 3.2.4
Yoast SEO 3.2.5
Yoast SEO 3.3.0
Yoast SEO 3.3.1
Yoast SEO 3.3.2
Yoast SEO 3.3.3
Yoast SEO 3.3.4
Yoast SEO 3.4
Yoast SEO 3.4.1
Yoast SEO 3.4.2
Yoast SEO 3.5
Yoast SEO 3.6
Yoast SEO 3.6.1
Yoast SEO 3.7.0
Yoast SEO 3.7.1
Yoast SEO 3.8
Yoast SEO 3.9
Yoast SEO 4.0
Yoast SEO 4.0.2
Yoast SEO 4.1
Yoast SEO 4.2
Yoast SEO 4.2.1
Yoast SEO 4.3
Yoast SEO 4.4
Yoast SEO 4.5
Yoast SEO 4.6
Yoast SEO 4.7
Yoast SEO 4.7.1
Yoast SEO 4.8
Yoast SEO 4.9
Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1
Yoast SEO 10.1
Yoast SEO 10.1.1
Yoast SEO 10.1.2
Yoast SEO 10.1.3
Yoast SEO 11.0
Yoast SEO 11.1
Yoast SEO 11.1.1
Yoast SEO 11.2
Yoast SEO 11.2.1
Yoast SEO 11.3
Yoast SEO 11.4
Yoast SEO 11.5
Yoast SEO 11.6
Yoast SEO 11.7
Yoast SEO 11.8
Yoast SEO 11.9
Yoast SEO 12.0
Yoast SEO 12.1
Yoast SEO 12.2
Yoast SEO 12.3
Yoast SEO 12.4
Yoast SEO 12.5
Yoast SEO 12.5.1
Yoast SEO 12.6
Yoast SEO 12.6.1
Yoast SEO 12.6.2
Yoast SEO 12.7
Yoast SEO 12.7.1
Yoast SEO 12.8
Yoast SEO 12.8.1
Yoast SEO 12.9
Yoast SEO 12.9.1
Yoast SEO 13.0
Yoast SEO 13.1
Yoast SEO 13.2
Yoast SEO 13.3
Yoast SEO 13.4
Yoast SEO 13.5
Yoast SEO 14.0
Yoast SEO 14.0.1
Yoast SEO 14.0.2
Yoast SEO 14.0.3
Yoast SEO 14.0.4
Yoast SEO 14.1
Yoast SEO 14.2
Yoast SEO 14.3
Yoast SEO 14.4
Yoast SEO 14.4.1
Yoast SEO 14.5
Yoast SEO 14.6
Yoast SEO 14.6.1
Yoast SEO 14.7
Yoast SEO 14.8
Yoast SEO 14.8.1
Yoast SEO 14.9
Yoast SEO 15.0
Yoast SEO 15.1
Yoast SEO 15.1.1
Yoast SEO 15.2
Yoast SEO 15.2.1
Yoast SEO 15.3
Yoast SEO 15.4
Yoast SEO 15.5
Yoast SEO 15.6
Yoast SEO 15.6.1
Yoast SEO 15.6.2
Yoast SEO 15.7
Yoast SEO 15.8
Yoast SEO 15.9
Yoast SEO 15.9.1
Yoast SEO 15.9.2
Yoast SEO 16.0
Yoast SEO 16.0.1
Yoast SEO 16.0.2
Yoast SEO 16.1
Yoast SEO 16.1.1
Yoast SEO 16.2
Yoast SEO 16.3
Yoast SEO 16.4
Yoast SEO 16.5
Yoast SEO 16.6
Yoast SEO 16.6.1
Yoast SEO 16.7
Yoast SEO 16.7.1-slovak-hotfix
Yoast SEO 16.8
Yoast SEO 16.9
Yoast SEO 17.0
Yoast SEO 17.1
Yoast SEO 17.2
Yoast SEO 17.2.1
Yoast SEO 17.3
Yoast SEO 17.4
Yoast SEO 17.5
Yoast SEO 17.6
Yoast SEO 17.7
Yoast SEO 17.7.1
Yoast SEO 17.8
Yoast SEO 17.9
Yoast SEO 18.0
Yoast SEO 18.1
Yoast SEO 18.2
Yoast SEO 18.3
Yoast SEO 18.4
Yoast SEO 18.4.1
Yoast SEO 18.5
Yoast SEO 18.5.1
Yoast SEO 18.6
Yoast SEO 18.7
Yoast SEO 18.8
Yoast SEO 18.9
Yoast SEO 19.0
Yoast SEO 19.1
Yoast SEO 19.2
Yoast SEO 19.3
Yoast SEO 19.4
Yoast SEO 19.5
Yoast SEO 19.5.1
Yoast SEO 19.6
Yoast SEO 19.6.1

XSS in the image presenter of opengraph module

Skrevet den 25. august 202218. oktober 2025 af i Yoast SEO

The image-presenter of the opengraph module is not properly escaped to prevent an XSS.

This vulnerability affects the following application versions:

Yoast SEO 14.0
Yoast SEO 14.0.1
Yoast SEO 14.0.2
Yoast SEO 14.0.3
Yoast SEO 14.0.4
Yoast SEO 14.1
Yoast SEO 14.2
Yoast SEO 14.3
Yoast SEO 14.4
Yoast SEO 14.4.1
Yoast SEO 14.5
Yoast SEO 14.6
Yoast SEO 14.6.1
Yoast SEO 14.7
Yoast SEO 14.8
Yoast SEO 14.8.1
Yoast SEO 14.9
Yoast SEO 15.0
Yoast SEO 15.1
Yoast SEO 15.1.1
Yoast SEO 15.2
Yoast SEO 15.2.1
Yoast SEO 15.3
Yoast SEO 15.4
Yoast SEO 15.5
Yoast SEO 15.6
Yoast SEO 15.6.1
Yoast SEO 15.6.2
Yoast SEO 15.7
Yoast SEO 15.8
Yoast SEO 15.9
Yoast SEO 15.9.1
Yoast SEO 15.9.2
Yoast SEO 16.0
Yoast SEO 16.0.1
Yoast SEO 16.0.2
Yoast SEO 16.1
Yoast SEO 16.1.1
Yoast SEO 16.2
Yoast SEO 16.3
Yoast SEO 16.4
Yoast SEO 16.5
Yoast SEO 16.6
Yoast SEO 16.6.1
Yoast SEO 16.7
Yoast SEO 16.7.1-slovak-hotfix
Yoast SEO 16.8
Yoast SEO 16.9
Yoast SEO 17.0
Yoast SEO 17.1
Yoast SEO 17.2
Yoast SEO 17.2.1
Yoast SEO 17.3
Yoast SEO 17.4
Yoast SEO 17.5
Yoast SEO 17.6
Yoast SEO 17.7
Yoast SEO 17.7.1
Yoast SEO 17.8
Yoast SEO 17.9
Yoast SEO 18.0
Yoast SEO 18.1
Yoast SEO 18.2
Yoast SEO 18.3
Yoast SEO 18.4
Yoast SEO 18.4.1
Yoast SEO 18.5
Yoast SEO 18.5.1
Yoast SEO 18.6
Yoast SEO 18.7
Yoast SEO 18.8
Yoast SEO 18.9
Yoast SEO 19.0
Yoast SEO 19.1

XSS in Metabox

Skrevet den 15. juni 202218. oktober 2025 af i Yoast SEO

Input is not properly sanitized to prevent an XSS attack

This vulnerability affects the following application versions:

Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1
Yoast SEO 10.1
Yoast SEO 10.1.1
Yoast SEO 10.1.2
Yoast SEO 10.1.3
Yoast SEO 11.0
Yoast SEO 11.1
Yoast SEO 11.1.1
Yoast SEO 11.2
Yoast SEO 11.2.1
Yoast SEO 11.3
Yoast SEO 11.4
Yoast SEO 11.5
Yoast SEO 11.6
Yoast SEO 11.7
Yoast SEO 11.8
Yoast SEO 11.9
Yoast SEO 12.0
Yoast SEO 12.1
Yoast SEO 12.2
Yoast SEO 12.3
Yoast SEO 12.4
Yoast SEO 12.5
Yoast SEO 12.5.1
Yoast SEO 12.6
Yoast SEO 12.6.1
Yoast SEO 12.6.2
Yoast SEO 12.7
Yoast SEO 12.7.1
Yoast SEO 12.8
Yoast SEO 12.8.1
Yoast SEO 12.9
Yoast SEO 12.9.1
Yoast SEO 13.0
Yoast SEO 13.1
Yoast SEO 13.2
Yoast SEO 13.3
Yoast SEO 13.4
Yoast SEO 13.5
Yoast SEO 14.0
Yoast SEO 14.0.1
Yoast SEO 14.0.2
Yoast SEO 14.0.3
Yoast SEO 14.0.4
Yoast SEO 14.1
Yoast SEO 14.2
Yoast SEO 14.3
Yoast SEO 14.4
Yoast SEO 14.4.1
Yoast SEO 14.5
Yoast SEO 14.6
Yoast SEO 14.6.1
Yoast SEO 14.7
Yoast SEO 14.8
Yoast SEO 14.8.1
Yoast SEO 14.9
Yoast SEO 15.0
Yoast SEO 15.1
Yoast SEO 15.1.1
Yoast SEO 15.2
Yoast SEO 15.2.1
Yoast SEO 15.3
Yoast SEO 15.4
Yoast SEO 15.5
Yoast SEO 15.6
Yoast SEO 15.6.1
Yoast SEO 15.6.2
Yoast SEO 15.7
Yoast SEO 15.8
Yoast SEO 15.9
Yoast SEO 15.9.1
Yoast SEO 15.9.2
Yoast SEO 16.0
Yoast SEO 16.0.1
Yoast SEO 16.0.2
Yoast SEO 16.1
Yoast SEO 16.1.1
Yoast SEO 16.2
Yoast SEO 16.3
Yoast SEO 16.4
Yoast SEO 16.5
Yoast SEO 16.6
Yoast SEO 16.6.1
Yoast SEO 16.7
Yoast SEO 16.7.1-slovak-hotfix
Yoast SEO 16.8
Yoast SEO 16.9
Yoast SEO 17.0
Yoast SEO 17.1
Yoast SEO 17.2
Yoast SEO 17.2.1
Yoast SEO 17.3
Yoast SEO 17.4
Yoast SEO 17.5
Yoast SEO 17.6
Yoast SEO 17.7
Yoast SEO 17.7.1
Yoast SEO 17.8
Yoast SEO 17.9
Yoast SEO 18.0
Yoast SEO 18.1
Yoast SEO 18.2
Yoast SEO 18.3
Yoast SEO 18.4.1

Added escaping to sidebar and shop pages to prevent XSS

Skrevet den 20. oktober 202020. november 2024 af i Yoast SEO

Sidebar and shop page weren’t properly escaped against XSS.

This vulnerability affects the following application versions:

Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1
Yoast SEO 10.1
Yoast SEO 10.1.1
Yoast SEO 10.1.2
Yoast SEO 10.1.3
Yoast SEO 11.0
Yoast SEO 11.1
Yoast SEO 11.1.1
Yoast SEO 11.2
Yoast SEO 11.2.1
Yoast SEO 11.3
Yoast SEO 11.4
Yoast SEO 11.5
Yoast SEO 11.6
Yoast SEO 11.7
Yoast SEO 11.8
Yoast SEO 11.9
Yoast SEO 12.0
Yoast SEO 12.1
Yoast SEO 12.2
Yoast SEO 12.3
Yoast SEO 12.4
Yoast SEO 12.5
Yoast SEO 12.5.1
Yoast SEO 12.6
Yoast SEO 12.6.1
Yoast SEO 12.6.2
Yoast SEO 12.7
Yoast SEO 12.7.1
Yoast SEO 12.8
Yoast SEO 12.8.1
Yoast SEO 12.9
Yoast SEO 12.9.1
Yoast SEO 13.0
Yoast SEO 13.1
Yoast SEO 13.2
Yoast SEO 13.3
Yoast SEO 13.4
Yoast SEO 13.5
Yoast SEO 14.0
Yoast SEO 14.0.1
Yoast SEO 14.0.2
Yoast SEO 14.0.3
Yoast SEO 14.0.4
Yoast SEO 14.1
Yoast SEO 14.2
Yoast SEO 14.3
Yoast SEO 14.4
Yoast SEO 14.4.1
Yoast SEO 14.5
Yoast SEO 14.6
Yoast SEO 14.6.1
Yoast SEO 14.7
Yoast SEO 14.8
Yoast SEO 14.8.1
Yoast SEO 14.9

Added escpaping to meta box expand message to prevent XSS

Skrevet den 10. september 202020. november 2024 af i Yoast SEO

The meta box expand message wasn’t properly escaped against XSS.

This vulnerability affects the following application versions:

Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1
Yoast SEO 10.1
Yoast SEO 10.1.1
Yoast SEO 10.1.2
Yoast SEO 10.1.3
Yoast SEO 11.0
Yoast SEO 11.1
Yoast SEO 11.1.1
Yoast SEO 11.2
Yoast SEO 11.2.1
Yoast SEO 11.3
Yoast SEO 11.4
Yoast SEO 11.5
Yoast SEO 11.6
Yoast SEO 11.7
Yoast SEO 11.8
Yoast SEO 11.9
Yoast SEO 12.0
Yoast SEO 12.1
Yoast SEO 12.2
Yoast SEO 12.3
Yoast SEO 12.4
Yoast SEO 12.5
Yoast SEO 12.5.1
Yoast SEO 12.6
Yoast SEO 12.6.1
Yoast SEO 12.6.2
Yoast SEO 12.7
Yoast SEO 12.7.1
Yoast SEO 12.8
Yoast SEO 12.8.1
Yoast SEO 12.9
Yoast SEO 12.9.1
Yoast SEO 13.0
Yoast SEO 13.1
Yoast SEO 13.2
Yoast SEO 13.3
Yoast SEO 13.4
Yoast SEO 13.5
Yoast SEO 14.0
Yoast SEO 14.0.1
Yoast SEO 14.0.2
Yoast SEO 14.0.3
Yoast SEO 14.0.4
Yoast SEO 14.1
Yoast SEO 14.2
Yoast SEO 14.3
Yoast SEO 14.4
Yoast SEO 14.4.1
Yoast SEO 14.5
Yoast SEO 14.6
Yoast SEO 14.6.1
Yoast SEO 14.7

Cast user_id to int to prevent XSS

Skrevet den 9. juli 202020. november 2024 af i Yoast SEO

Introducing type casting to avoid XSS.

This vulnerability affects the following application versions:

Yoast SEO 1.6.2
Yoast SEO 1.6.3
Yoast SEO 1.7
Yoast SEO 1.7.1
Yoast SEO 2.0
Yoast SEO 2.0.1
Yoast SEO 2.1
Yoast SEO 2.1.1
Yoast SEO 2.2
Yoast SEO 2.2.1
Yoast SEO 2.3
Yoast SEO 2.3.1
Yoast SEO 2.3.2
Yoast SEO 2.3.3
Yoast SEO 2.3.4
Yoast SEO 2.3.5
Yoast SEO 3.0
Yoast SEO 3.0.1
Yoast SEO 3.0.2
Yoast SEO 3.0.3
Yoast SEO 3.0.4
Yoast SEO 3.0.5
Yoast SEO 3.0.6
Yoast SEO 3.0.7
Yoast SEO 3.1
Yoast SEO 3.1.1
Yoast SEO 3.1.2
Yoast SEO 3.2
Yoast SEO 3.2.1
Yoast SEO 3.2.2
Yoast SEO 3.2.3
Yoast SEO 3.2.4
Yoast SEO 3.2.5
Yoast SEO 3.3.0
Yoast SEO 3.3.1
Yoast SEO 3.3.2
Yoast SEO 3.3.3
Yoast SEO 3.3.4
Yoast SEO 3.4
Yoast SEO 3.4.1
Yoast SEO 3.4.2
Yoast SEO 3.5
Yoast SEO 3.6
Yoast SEO 3.6.1
Yoast SEO 3.7.0
Yoast SEO 3.7.1
Yoast SEO 3.8
Yoast SEO 3.9
Yoast SEO 4.0
Yoast SEO 4.0.2
Yoast SEO 4.1
Yoast SEO 4.2
Yoast SEO 4.2.1
Yoast SEO 4.3
Yoast SEO 4.4
Yoast SEO 4.5
Yoast SEO 4.6
Yoast SEO 4.7
Yoast SEO 4.7.1
Yoast SEO 4.8
Yoast SEO 4.9
Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1
Yoast SEO 10.1
Yoast SEO 10.1.1
Yoast SEO 10.1.2
Yoast SEO 10.1.3
Yoast SEO 11.0
Yoast SEO 11.1
Yoast SEO 11.1.1
Yoast SEO 11.2
Yoast SEO 11.2.1
Yoast SEO 11.3
Yoast SEO 11.4
Yoast SEO 11.5
Yoast SEO 11.6
Yoast SEO 11.7
Yoast SEO 11.8
Yoast SEO 11.9
Yoast SEO 12.0
Yoast SEO 12.1
Yoast SEO 12.2
Yoast SEO 12.3
Yoast SEO 12.4
Yoast SEO 12.5
Yoast SEO 12.5.1
Yoast SEO 12.6
Yoast SEO 12.6.1
Yoast SEO 12.6.2
Yoast SEO 12.7
Yoast SEO 12.7.1
Yoast SEO 12.8
Yoast SEO 12.8.1
Yoast SEO 12.9
Yoast SEO 12.9.1
Yoast SEO 13.0
Yoast SEO 13.1
Yoast SEO 13.2
Yoast SEO 13.3
Yoast SEO 13.4
Yoast SEO 13.5
Yoast SEO 14.0
Yoast SEO 14.0.1
Yoast SEO 14.0.2
Yoast SEO 14.0.3
Yoast SEO 14.0.4
Yoast SEO 14.1
Yoast SEO 14.2
Yoast SEO 14.3

Adding escaping to specific invalid value message to avoid XSS

Skrevet den 30. juni 202020. november 2024 af i Yoast SEO

A specific invalid value message wasn’t properly escaped against XSS.

This vulnerability affects the following application versions:

Yoast SEO 12.1
Yoast SEO 12.2
Yoast SEO 12.3
Yoast SEO 12.4
Yoast SEO 12.5
Yoast SEO 12.5.1
Yoast SEO 12.6
Yoast SEO 12.6.1
Yoast SEO 12.6.2
Yoast SEO 12.7
Yoast SEO 12.7.1
Yoast SEO 12.8
Yoast SEO 12.8.1
Yoast SEO 12.9
Yoast SEO 12.9.1
Yoast SEO 13.0
Yoast SEO 13.1
Yoast SEO 13.2
Yoast SEO 13.3
Yoast SEO 13.4
Yoast SEO 13.5
Yoast SEO 14.0
Yoast SEO 14.0.1
Yoast SEO 14.0.2
Yoast SEO 14.0.3
Yoast SEO 14.0.4
Yoast SEO 14.1

Adding escaping to admin url for general options to prevent XSS

Skrevet den 28. maj 202020. november 2024 af i Yoast SEO

The admin url for general options was not properly escaped against XSS.

This vulnerability affects the following application versions:

Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1
Yoast SEO 10.1
Yoast SEO 10.1.1
Yoast SEO 10.1.2
Yoast SEO 10.1.3
Yoast SEO 11.0
Yoast SEO 11.1
Yoast SEO 11.1.1
Yoast SEO 11.2
Yoast SEO 11.2.1
Yoast SEO 11.3
Yoast SEO 11.4
Yoast SEO 11.5
Yoast SEO 11.6
Yoast SEO 11.7
Yoast SEO 11.8
Yoast SEO 11.9
Yoast SEO 12.0
Yoast SEO 12.1
Yoast SEO 12.2
Yoast SEO 12.3
Yoast SEO 12.4
Yoast SEO 12.5
Yoast SEO 12.5.1
Yoast SEO 12.6
Yoast SEO 12.6.1
Yoast SEO 12.6.2
Yoast SEO 12.7
Yoast SEO 12.7.1
Yoast SEO 12.8
Yoast SEO 12.8.1
Yoast SEO 12.9
Yoast SEO 12.9.1
Yoast SEO 13.0
Yoast SEO 13.1
Yoast SEO 13.2
Yoast SEO 13.3
Yoast SEO 13.4
Yoast SEO 13.5
Yoast SEO 14.0
Yoast SEO 14.0.1
Yoast SEO 14.0.2
Yoast SEO 14.0.3
Yoast SEO 14.0.4

Sanitize HTTP_USER_AGENT added to prevent XSS

Skrevet den 19. februar 202018. oktober 2025 af i Yoast SEO

HTTP_USER_AGENT was not properly sanitized against XSS.

This vulnerability affects the following application versions:

Yoast SEO 12.6
Yoast SEO 12.6.1
Yoast SEO 12.6.2
Yoast SEO 12.7
Yoast SEO 12.7.1

Escaping added to attribute and URL to avoid XSS

Skrevet den 31. januar 202012. juni 2025 af i Yoast SEO

Attribute and URL were not properly escaped.

This vulnerability affects the following application versions:

Yoast SEO 11.4
Yoast SEO 11.5
Yoast SEO 11.6
Yoast SEO 11.7
Yoast SEO 11.8
Yoast SEO 11.9
Yoast SEO 12.0
Yoast SEO 12.1
Yoast SEO 12.2
Yoast SEO 12.3
Yoast SEO 12.4
Yoast SEO 12.5
Yoast SEO 12.5.1
Yoast SEO 12.6
Yoast SEO 12.6.1
Yoast SEO 12.6.2

Prevent notice on post without valid author to avoid exposing data

Skrevet den 23. januar 202018. oktober 2025 af i Yoast SEO

Prevent notice on post without valid author by checking user object.

This vulnerability affects the following application versions:

Yoast SEO 11.6
Yoast SEO 11.7
Yoast SEO 11.8
Yoast SEO 11.9
Yoast SEO 12.0
Yoast SEO 12.1
Yoast SEO 12.2

Adding key sanitation for attributes to prevent XSS

Skrevet den 23. januar 202020. november 2024 af i Yoast SEO

Attributes were not properly sanitized as keys to prevent XSS.

This vulnerability affects the following application versions:

Yoast SEO 3.2
Yoast SEO 3.2.1
Yoast SEO 3.2.2
Yoast SEO 3.2.3
Yoast SEO 3.2.4
Yoast SEO 3.2.5
Yoast SEO 3.3.0
Yoast SEO 3.3.1
Yoast SEO 3.3.2
Yoast SEO 3.3.3
Yoast SEO 3.3.4
Yoast SEO 3.4
Yoast SEO 3.4.1
Yoast SEO 3.4.2
Yoast SEO 3.5
Yoast SEO 3.6
Yoast SEO 3.6.1
Yoast SEO 3.7.0
Yoast SEO 3.7.1
Yoast SEO 3.8
Yoast SEO 3.9
Yoast SEO 4.0
Yoast SEO 4.0.2
Yoast SEO 4.1
Yoast SEO 4.2
Yoast SEO 4.2.1
Yoast SEO 4.3
Yoast SEO 4.4
Yoast SEO 4.5
Yoast SEO 4.6
Yoast SEO 4.7
Yoast SEO 4.7.1
Yoast SEO 4.8
Yoast SEO 4.9
Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1
Yoast SEO 10.1
Yoast SEO 10.1.1
Yoast SEO 10.1.2
Yoast SEO 10.1.3
Yoast SEO 11.0
Yoast SEO 11.1
Yoast SEO 11.1.1
Yoast SEO 11.2
Yoast SEO 11.2.1
Yoast SEO 11.3
Yoast SEO 11.4
Yoast SEO 11.5
Yoast SEO 11.6
Yoast SEO 11.7
Yoast SEO 11.8
Yoast SEO 11.9
Yoast SEO 12.0
Yoast SEO 12.1
Yoast SEO 12.2
Yoast SEO 12.3

Adding escaping to FAQ and how-to’s to prevent XSS

Skrevet den 23. januar 202020. november 2024 af i Yoast SEO

Name and Json data were not properly escaped against XSS.

This vulnerability affects the following application versions:

Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1
Yoast SEO 10.1
Yoast SEO 10.1.1
Yoast SEO 10.1.2
Yoast SEO 10.1.3
Yoast SEO 11.0
Yoast SEO 11.1
Yoast SEO 11.1.1
Yoast SEO 11.2
Yoast SEO 11.2.1
Yoast SEO 11.3
Yoast SEO 11.4
Yoast SEO 11.5
Yoast SEO 11.6
Yoast SEO 11.7
Yoast SEO 11.8
Yoast SEO 11.9
Yoast SEO 12.0
Yoast SEO 12.1
Yoast SEO 12.2
Yoast SEO 12.3

Sanitize URL before creating a validated URL

Skrevet den 9. december 201918. oktober 2025 af i Yoast SEO

User input for submitted URL is sanitized before checked its validity and saved to the database.

This vulnerability affects the following application versions:

Yoast SEO 12.0
Yoast SEO 12.1
Yoast SEO 12.2

Escaping import/export tool to prevent XSS

Skrevet den 19. november 201920. november 2024 af i Yoast SEO

The import and export tool was not properly escaped against XSS.

This vulnerability affects the following application versions:

Yoast SEO 3.5
Yoast SEO 3.6
Yoast SEO 3.6.1
Yoast SEO 3.7.0
Yoast SEO 3.7.1
Yoast SEO 3.8
Yoast SEO 3.9
Yoast SEO 4.0
Yoast SEO 4.0.2
Yoast SEO 4.1
Yoast SEO 4.2
Yoast SEO 4.2.1
Yoast SEO 4.3
Yoast SEO 4.4
Yoast SEO 4.5
Yoast SEO 4.6
Yoast SEO 4.7
Yoast SEO 4.7.1
Yoast SEO 4.8
Yoast SEO 4.9
Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1
Yoast SEO 10.1
Yoast SEO 10.1.1
Yoast SEO 10.1.2
Yoast SEO 10.1.3
Yoast SEO 11.0
Yoast SEO 11.1
Yoast SEO 11.1.1
Yoast SEO 11.2
Yoast SEO 11.2.1
Yoast SEO 11.3
Yoast SEO 11.4
Yoast SEO 11.5
Yoast SEO 11.6
Yoast SEO 11.7
Yoast SEO 11.8
Yoast SEO 11.9
Yoast SEO 12.0
Yoast SEO 12.1

Add escaping to different admin sections to prevent XSS

Skrevet den 28. oktober 201920. november 2024 af i Yoast SEO

Various admin sections were not properly sanitized against XSS.

This vulnerability affects the following application versions:

Yoast SEO 1.5.5
Yoast SEO 1.5.5.1
Yoast SEO 1.5.5.2
Yoast SEO 1.5.5.3
Yoast SEO 1.5.6
Yoast SEO 1.6
Yoast SEO 1.6.1
Yoast SEO 1.6.2
Yoast SEO 1.6.3
Yoast SEO 1.7
Yoast SEO 1.7.1
Yoast SEO 2.0
Yoast SEO 2.0.1
Yoast SEO 2.1
Yoast SEO 2.1.1
Yoast SEO 2.2
Yoast SEO 2.2.1
Yoast SEO 2.3
Yoast SEO 2.3.1
Yoast SEO 2.3.2
Yoast SEO 2.3.3
Yoast SEO 2.3.4
Yoast SEO 2.3.5
Yoast SEO 3.0
Yoast SEO 3.0.1
Yoast SEO 3.0.2
Yoast SEO 3.0.3
Yoast SEO 3.0.4
Yoast SEO 3.0.5
Yoast SEO 3.0.6
Yoast SEO 3.0.7
Yoast SEO 3.1
Yoast SEO 3.1.1
Yoast SEO 3.1.2
Yoast SEO 3.2
Yoast SEO 3.2.1
Yoast SEO 3.2.2
Yoast SEO 3.2.3
Yoast SEO 3.2.4
Yoast SEO 3.2.5
Yoast SEO 3.3.0
Yoast SEO 3.3.1
Yoast SEO 3.3.2
Yoast SEO 3.3.3
Yoast SEO 3.3.4
Yoast SEO 3.4
Yoast SEO 3.4.1
Yoast SEO 3.4.2
Yoast SEO 3.5
Yoast SEO 3.6
Yoast SEO 3.6.1
Yoast SEO 3.7.0
Yoast SEO 3.7.1
Yoast SEO 3.8
Yoast SEO 3.9
Yoast SEO 4.0
Yoast SEO 4.0.2
Yoast SEO 4.1
Yoast SEO 4.2
Yoast SEO 4.2.1
Yoast SEO 4.3
Yoast SEO 4.4
Yoast SEO 4.5
Yoast SEO 4.6
Yoast SEO 4.7
Yoast SEO 4.7.1
Yoast SEO 4.8
Yoast SEO 4.9
Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1
Yoast SEO 10.1
Yoast SEO 10.1.1
Yoast SEO 10.1.2
Yoast SEO 10.1.3
Yoast SEO 11.0
Yoast SEO 11.1
Yoast SEO 11.1.1
Yoast SEO 11.2
Yoast SEO 11.2.1
Yoast SEO 11.3
Yoast SEO 11.4
Yoast SEO 11.5
Yoast SEO 11.6
Yoast SEO 11.7
Yoast SEO 11.8

Escaping collapsible metabox section to prevent XSS

Skrevet den 28. oktober 201920. november 2024 af i Yoast SEO

The collapsible and metabox section were not properly escaped against XSS.

This vulnerability affects the following application versions:

Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1
Yoast SEO 10.1
Yoast SEO 10.1.1
Yoast SEO 10.1.2
Yoast SEO 10.1.3
Yoast SEO 11.0
Yoast SEO 11.1
Yoast SEO 11.1.1
Yoast SEO 11.2
Yoast SEO 11.2.1
Yoast SEO 11.3
Yoast SEO 11.4
Yoast SEO 11.5
Yoast SEO 11.6
Yoast SEO 11.7
Yoast SEO 11.8

Escaping license file to prevent XSS

Skrevet den 3. september 201920. november 2024 af i Yoast SEO

Licenses file was not properly escaped against XSS.

This vulnerability affects the following application versions:

Yoast SEO 3.5
Yoast SEO 3.6
Yoast SEO 3.6.1
Yoast SEO 3.7.0
Yoast SEO 3.7.1
Yoast SEO 3.8
Yoast SEO 3.9
Yoast SEO 4.0
Yoast SEO 4.0.2
Yoast SEO 4.1
Yoast SEO 4.2
Yoast SEO 4.2.1
Yoast SEO 4.3
Yoast SEO 4.4
Yoast SEO 4.5
Yoast SEO 4.6
Yoast SEO 4.7
Yoast SEO 4.7.1
Yoast SEO 4.8
Yoast SEO 4.9
Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1
Yoast SEO 10.1
Yoast SEO 10.1.1
Yoast SEO 10.1.2
Yoast SEO 10.1.3
Yoast SEO 11.0

Added escaping to admin views to avoid XSS

Skrevet den 13. august 201920. november 2024 af i Yoast SEO

A range of elements were not properly escaped against a possible XSS attack.

This vulnerability affects the following application versions:

Yoast SEO 3.2
Yoast SEO 3.2.1
Yoast SEO 3.2.2
Yoast SEO 3.2.3
Yoast SEO 3.2.4
Yoast SEO 3.2.5
Yoast SEO 3.3.0
Yoast SEO 3.3.1
Yoast SEO 3.3.2
Yoast SEO 3.3.3
Yoast SEO 3.3.4
Yoast SEO 3.4
Yoast SEO 3.4.1
Yoast SEO 3.4.2
Yoast SEO 3.5
Yoast SEO 3.6
Yoast SEO 3.6.1
Yoast SEO 3.7.0
Yoast SEO 3.7.1
Yoast SEO 3.8
Yoast SEO 3.9
Yoast SEO 4.0
Yoast SEO 4.0.2
Yoast SEO 4.1
Yoast SEO 4.2
Yoast SEO 4.2.1
Yoast SEO 4.3
Yoast SEO 4.4
Yoast SEO 4.5
Yoast SEO 4.6
Yoast SEO 4.7
Yoast SEO 4.7.1
Yoast SEO 4.8
Yoast SEO 4.9
Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1
Yoast SEO 10.1
Yoast SEO 10.1.1
Yoast SEO 10.1.2
Yoast SEO 10.1.3
Yoast SEO 11.0
Yoast SEO 11.1
Yoast SEO 11.1.1

Explicitly convert to an integer to prevent code injection

Skrevet den 7. august 201920. november 2024 af i Yoast SEO

The blog id was not specifically type casting and that could lead to code injection.

This vulnerability affects the following application versions:

Yoast SEO 4.5
Yoast SEO 4.6
Yoast SEO 4.7
Yoast SEO 4.7.1
Yoast SEO 4.8
Yoast SEO 4.9
Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6
Yoast SEO 9.7
Yoast SEO 10.0
Yoast SEO 10.0.1

Added escaping to notifier to prevent XSS

Skrevet den 26. juni 201920. november 2024 af i Yoast SEO

Certain forms and links were not properly escaped to against XSS.

This vulnerability affects the following application versions:

Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3

Added escaping to metabox text field to prevent XSS

Skrevet den 26. juni 201920. november 2024 af i Yoast SEO

Certain inputs were not properly escaped against an XSS attack.

This vulnerability affects the following application versions:

Yoast SEO 2.0
Yoast SEO 2.0.1
Yoast SEO 2.1
Yoast SEO 2.1.1
Yoast SEO 2.2
Yoast SEO 2.2.1
Yoast SEO 2.3
Yoast SEO 2.3.1
Yoast SEO 2.3.2
Yoast SEO 2.3.3
Yoast SEO 2.3.4
Yoast SEO 2.3.5
Yoast SEO 3.0
Yoast SEO 3.0.1
Yoast SEO 3.0.2
Yoast SEO 3.0.3
Yoast SEO 3.0.4
Yoast SEO 3.0.5
Yoast SEO 3.0.6
Yoast SEO 3.0.7
Yoast SEO 3.1
Yoast SEO 3.1.1
Yoast SEO 3.1.2
Yoast SEO 3.2
Yoast SEO 3.2.1
Yoast SEO 3.2.2
Yoast SEO 3.2.3
Yoast SEO 3.2.4
Yoast SEO 3.2.5
Yoast SEO 3.3.0
Yoast SEO 3.3.1
Yoast SEO 3.3.2
Yoast SEO 3.3.3
Yoast SEO 3.3.4
Yoast SEO 3.4
Yoast SEO 3.4.1
Yoast SEO 3.4.2
Yoast SEO 3.5
Yoast SEO 3.6
Yoast SEO 3.6.1
Yoast SEO 3.7.0
Yoast SEO 3.7.1
Yoast SEO 3.8
Yoast SEO 3.9
Yoast SEO 4.0
Yoast SEO 4.0.2
Yoast SEO 4.1
Yoast SEO 4.2
Yoast SEO 4.2.1
Yoast SEO 4.3
Yoast SEO 4.4
Yoast SEO 4.5
Yoast SEO 4.6
Yoast SEO 4.7
Yoast SEO 4.7.1
Yoast SEO 4.8
Yoast SEO 4.9
Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5

Added escaping in the columns link to prevent XSS

Skrevet den 25. juni 201920. november 2024 af i Yoast SEO

The link in the column was not properly escaped against XSS.

This vulnerability affects the following application versions:

Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5
Yoast SEO 9.6

Sitemap sanitation added to avoid XSS

Skrevet den 24. juni 201918. oktober 2025 af i Yoast SEO

The sitemap request server was not properly sanitized against XSS.

This vulnerability affects the following application versions:

Yoast SEO 2.2
Yoast SEO 2.2.1
Yoast SEO 2.3
Yoast SEO 2.3.1
Yoast SEO 2.3.2
Yoast SEO 2.3.3
Yoast SEO 2.3.4
Yoast SEO 2.3.5
Yoast SEO 3.0
Yoast SEO 3.0.1
Yoast SEO 3.0.2
Yoast SEO 3.0.3
Yoast SEO 3.0.4
Yoast SEO 3.0.5
Yoast SEO 3.0.6
Yoast SEO 3.0.7
Yoast SEO 3.1
Yoast SEO 3.1.1
Yoast SEO 3.1.2
Yoast SEO 3.2
Yoast SEO 3.2.1
Yoast SEO 3.2.2
Yoast SEO 3.2.3
Yoast SEO 3.2.4
Yoast SEO 3.2.5
Yoast SEO 3.3.0
Yoast SEO 3.3.1
Yoast SEO 3.3.2
Yoast SEO 3.3.3
Yoast SEO 3.3.4
Yoast SEO 3.4
Yoast SEO 3.4.1
Yoast SEO 3.4.2
Yoast SEO 3.5
Yoast SEO 3.6
Yoast SEO 3.6.1
Yoast SEO 3.7.0
Yoast SEO 3.7.1
Yoast SEO 3.8
Yoast SEO 3.9
Yoast SEO 4.0
Yoast SEO 4.0.2
Yoast SEO 4.1
Yoast SEO 4.2
Yoast SEO 4.2.1
Yoast SEO 4.3
Yoast SEO 4.4
Yoast SEO 4.5
Yoast SEO 4.6
Yoast SEO 4.7
Yoast SEO 4.7.1
Yoast SEO 4.8
Yoast SEO 4.9
Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4

Add sanitation to Input variables in the bulk editor and ajax module to prevent XSS

Skrevet den 14. maj 201920. november 2024 af i Yoast SEO

Input variables in the bulk editor and ajax module were vulnerable to XSS.

This vulnerability affects the following application versions:

Yoast SEO 1.5.5
Yoast SEO 1.5.5.1
Yoast SEO 1.5.5.2
Yoast SEO 1.5.5.3
Yoast SEO 1.5.6
Yoast SEO 1.6
Yoast SEO 1.6.1
Yoast SEO 1.6.2
Yoast SEO 1.6.3
Yoast SEO 1.7
Yoast SEO 1.7.1
Yoast SEO 2.0
Yoast SEO 2.0.1
Yoast SEO 2.1
Yoast SEO 2.1.1
Yoast SEO 2.2
Yoast SEO 2.2.1
Yoast SEO 2.3
Yoast SEO 2.3.1
Yoast SEO 2.3.2
Yoast SEO 2.3.3
Yoast SEO 2.3.4
Yoast SEO 2.3.5
Yoast SEO 3.0
Yoast SEO 3.0.1
Yoast SEO 3.0.2
Yoast SEO 3.0.3
Yoast SEO 3.0.4
Yoast SEO 3.0.5
Yoast SEO 3.0.6
Yoast SEO 3.0.7
Yoast SEO 3.1
Yoast SEO 3.1.1
Yoast SEO 3.1.2
Yoast SEO 3.2
Yoast SEO 3.2.1
Yoast SEO 3.2.2
Yoast SEO 3.2.3
Yoast SEO 3.2.4
Yoast SEO 3.2.5
Yoast SEO 3.3.0
Yoast SEO 3.3.1
Yoast SEO 3.3.2
Yoast SEO 3.3.3
Yoast SEO 3.3.4
Yoast SEO 3.4
Yoast SEO 3.4.1
Yoast SEO 3.4.2
Yoast SEO 3.5
Yoast SEO 3.6
Yoast SEO 3.6.1
Yoast SEO 3.7.0
Yoast SEO 3.7.1
Yoast SEO 3.8
Yoast SEO 3.9
Yoast SEO 4.0
Yoast SEO 4.0.2
Yoast SEO 4.1
Yoast SEO 4.2
Yoast SEO 4.2.1
Yoast SEO 4.3
Yoast SEO 4.4
Yoast SEO 4.5
Yoast SEO 4.6
Yoast SEO 4.7
Yoast SEO 4.7.1
Yoast SEO 4.8
Yoast SEO 4.9
Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5

Escaping of HTML chars to prevent XSS

Skrevet den 13. maj 201920. november 2024 af i Yoast SEO

Unescaped html chars could lead to a possible XSS attack.

This vulnerability affects the following application versions:

Yoast SEO 3.7.0
Yoast SEO 3.7.1
Yoast SEO 3.8
Yoast SEO 3.9
Yoast SEO 4.0
Yoast SEO 4.0.2
Yoast SEO 4.1
Yoast SEO 4.2
Yoast SEO 4.2.1
Yoast SEO 4.3
Yoast SEO 4.4
Yoast SEO 4.5
Yoast SEO 4.6
Yoast SEO 4.7
Yoast SEO 4.7.1
Yoast SEO 4.8
Yoast SEO 4.9
Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5

Escaping promo extension message to prevent XSS

Skrevet den 13. maj 201920. november 2024 af i Yoast SEO

The promo extension messages were not properly escaped which could result in an XSS attack.

This vulnerability affects the following application versions:

Yoast SEO 2.3
Yoast SEO 2.3.1
Yoast SEO 2.3.2
Yoast SEO 2.3.3
Yoast SEO 2.3.4
Yoast SEO 2.3.5
Yoast SEO 3.0
Yoast SEO 3.0.1
Yoast SEO 3.0.2
Yoast SEO 3.0.3
Yoast SEO 3.0.4
Yoast SEO 3.0.5
Yoast SEO 3.0.6
Yoast SEO 3.0.7
Yoast SEO 3.1
Yoast SEO 3.1.1
Yoast SEO 3.1.2
Yoast SEO 3.2
Yoast SEO 3.2.1
Yoast SEO 3.2.2
Yoast SEO 3.2.3
Yoast SEO 3.2.4
Yoast SEO 3.2.5
Yoast SEO 3.3.0
Yoast SEO 3.3.1
Yoast SEO 3.3.2
Yoast SEO 3.3.3
Yoast SEO 3.3.4
Yoast SEO 3.4
Yoast SEO 3.4.1
Yoast SEO 3.4.2
Yoast SEO 3.5
Yoast SEO 3.6
Yoast SEO 3.6.1
Yoast SEO 3.7.0
Yoast SEO 3.7.1
Yoast SEO 3.8
Yoast SEO 3.9
Yoast SEO 4.0
Yoast SEO 4.0.2
Yoast SEO 4.1
Yoast SEO 4.2
Yoast SEO 4.2.1
Yoast SEO 4.3
Yoast SEO 4.4
Yoast SEO 4.5
Yoast SEO 4.6
Yoast SEO 4.7
Yoast SEO 4.7.1
Yoast SEO 4.8
Yoast SEO 4.9
Yoast SEO 5.0
Yoast SEO 5.0.1
Yoast SEO 5.0.2
Yoast SEO 5.1
Yoast SEO 5.2
Yoast SEO 5.3
Yoast SEO 5.3.1
Yoast SEO 5.3.2
Yoast SEO 5.3.3
Yoast SEO 5.4.0
Yoast SEO 5.4.1
Yoast SEO 5.4.2
Yoast SEO 5.5
Yoast SEO 5.5.1
Yoast SEO 5.6
Yoast SEO 5.6.1
Yoast SEO 5.7
Yoast SEO 5.7.1
Yoast SEO 5.8
Yoast SEO 5.9
Yoast SEO 5.9.1
Yoast SEO 5.9.2
Yoast SEO 5.9.3
Yoast SEO 6.0
Yoast SEO 6.1
Yoast SEO 6.1.1
Yoast SEO 6.2
Yoast SEO 6.3
Yoast SEO 6.3.1
Yoast SEO 7.0
Yoast SEO 7.0.1
Yoast SEO 7.0.2
Yoast SEO 7.0.3
Yoast SEO 7.1
Yoast SEO 7.2
Yoast SEO 7.3
Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5

Escaping html chars to prevent XSS

Skrevet den 13. maj 201920. november 2024 af i Yoast SEO

Unescaped html chars at the frontend could result into an XSS attack.

This vulnerability affects the following application versions:

Yoast SEO 7.4
Yoast SEO 7.4.1
Yoast SEO 7.4.2
Yoast SEO 7.5
Yoast SEO 7.5.1
Yoast SEO 7.5.3
Yoast SEO 7.6
Yoast SEO 7.6.1
Yoast SEO 7.7
Yoast SEO 7.7.1
Yoast SEO 7.7.2
Yoast SEO 7.7.3
Yoast SEO 7.8
Yoast SEO 7.9
Yoast SEO 7.9.1
Yoast SEO 8.0
Yoast SEO 8.1
Yoast SEO 8.1.1
Yoast SEO 8.1.2
Yoast SEO 8.2
Yoast SEO 8.2.1
Yoast SEO 8.3
Yoast SEO 8.4
Yoast SEO 9.0
Yoast SEO 9.0.1
Yoast SEO 9.0.2
Yoast SEO 9.0.3
Yoast SEO 9.1
Yoast SEO 9.2
Yoast SEO 9.2.1
Yoast SEO 9.3
Yoast SEO 9.4
Yoast SEO 9.5

Yoast notification escape

Skrevet den 3. maj 2019 af stom_admin i Yoast SEO

The Yoast notification message type was not properly escaped against XSS attack.

This vulnerability affects the following application versions:

Yoast SEO 1.5.3
Yoast SEO 1.5.3.1
Yoast SEO 1.5.3.2
Yoast SEO 1.5.3.3
Yoast SEO 1.5.4
Yoast SEO 1.5.4.1
Yoast SEO 1.5.4.2
Yoast SEO 1.5.5
Yoast SEO 1.5.5.1
Yoast SEO 1.5.5.2
Yoast SEO 1.5.5.3
Yoast SEO 1.5.6
Yoast SEO 1.6
Yoast SEO 1.6.1
Yoast SEO 1.6.2
Yoast SEO 1.6.3
Yoast SEO 1.7
Yoast SEO 1.7.1

Validation of image attachment

Skrevet den 3. maj 201918. oktober 2025 af i Yoast SEO

Image attachment to the open graph was not properly validated.

This vulnerability affects the following application versions:

Yoast SEO 7.4

Om os