Feed live

yoast CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

339,954

All time

Critical · Active

10,868

CVSS ≥ 9.0

New · 14 days

2,621

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1–20 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-57764	medium	6.5/10	WordPress Surbma \| Yoast SEO Breadcrumb Shortcode plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability	Jul 2, 2026 18d ago
CVE-2026-40722	medium	5.5/10	WordPress Yoast SEO Premium plugin <= 26.6 - Broken Access Control vulnerability	Jun 17, 2026 1mo ago
CVE-2026-53740	medium	5.1/10	Yoast Duplicate Post through 4.6 Stored Cross-Site Scripting via Scheduled Republish Notice	Jun 10, 2026 1mo ago
CVE-2026-53739	medium	5.1/10	Yoast Duplicate Post through 4.6 Cross-Site Request Forgery via duplicate_post_dismiss_notice	Jun 10, 2026 1mo ago
CVE-2025-14481	medium	4.3/10	Yoast SEO <= 26.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'post_id' Parameter	May 27, 2026 1mo ago
CVE-2026-3427	medium	6.4/10	Yoast SEO <= 27.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute	Mar 22, 2026 4mo ago
CVE-2026-1217	medium	5.4/10	Yoast Duplicate Post <= 4.5 - Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite	Mar 18, 2026 4mo ago
CVE-2026-1293	medium	6.4/10	Yoast SEO <= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute	Feb 6, 2026 5mo ago
CVE-2026-24591	medium	6.5/10	WordPress Turn Yoast SEO FAQ Block to Accordion plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability	Jan 23, 2026 5mo ago
CVE-2025-15019	medium	6.4/10	BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	Jan 9, 2026 6mo ago
CVE-2025-11241	medium	6.4/10	Yoast SEO Premium 25.7-25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting	Oct 3, 2025 9mo ago
CVE-2023-28775	medium	5.3/10	WordPress Yoast SEO Premium plugin <= 20.4 - Unauthenticated Zapier API Key Reset vulnerability	Jun 11, 2024 2y ago
CVE-2024-4984	medium	6.4/10	Yoast SEO <= 22.6 - Authenticated (Contributor+) Stored Cross-Site Scripting	May 16, 2024 2y ago
CVE-2024-4041	medium	6.1/10	Yoast SEO <= 22.5 - Reflected Cross-Site Scripting	May 9, 2024 2y ago
CVE-2023-40680	medium	5.9/10	WordPress Yoast SEO Plugin <= 21.0 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-28780	medium	6.5/10	WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-32300	high	7.1/10	WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Scripting (XSS)	Aug 23, 2023 2y ago
CVE-2023-28785	medium	6.5/10	WordPress Yoast SEO: Local Plugin <= 14.9 is vulnerable to Cross Site Scripting (XSS)	May 28, 2023 3y ago
CVE-2021-25118	—	—	Yoast SEO 16.7-17.2 - Unauthenticated Full Path Disclosure	Feb 28, 2022 4y ago
CVE-2021-24153	—	—	Yoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS)	Apr 5, 2021 5y ago