Search Results (23 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-24153 1 Yoast 1 Yoast Seo 2024-11-21 5.4 Medium
A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as alert but bypasses were found.
CVE-2019-13478 1 Yoast 1 Yoast Seo 2024-11-21 9.8 Critical
The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions.
CVE-2018-19370 1 Yoast 1 Yoast Seo 2024-11-21 N/A
A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the Yoast SEO (wordpress-seo) plugin before 9.2.0 for WordPress allows an SEO Manager to perform command execution on the Operating System via a ZIP import.