Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total2
Critical0
High0
Medium2
Reset
Showing 1-2 of 2 records
Threat Entry Updated 2026-03-23

CVE-2026-3427 - Advanced Seo With Real Time Guidance And Built In Ai Plugin

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the `jsonText` block attribute in all versions up to, and including, 27.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Advanced Seo With Real Time Guidance And Built In Ai

CVE-2026-3427

MEDIUM CVSS 6.4 2026-03-22
Threat Entry Updated 2026-04-15

CVE-2026-1293 - Advanced Seo With Real Time Guidance And Built In Ai Plugin

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the `yoast-schema` block attribute in all versions up to, and including, 26.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Advanced Seo With Real Time Guidance And Built In Ai

CVE-2026-1293

MEDIUM CVSS 6.4 2026-02-06
Scroll to top