Known vulnerabilities in the Yoast SEO plugin
18 security advisories have been published for the Yoast SEO plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Yoast SEO - Cross-Site Scripting (XSS) (CVE-2026-15425) MEDIUM
- Yoast SEO - Cross-Site Scripting (XSS) (CVE-2026-57764) MEDIUM
- Yoast SEO - Broken Access Control (CVE-2026-40722) MEDIUM
- Yoast Seo - Security Vulnerability (CVE-2025-14481) MEDIUM
- Yoast SEO - Cross-Site Scripting (XSS) (CVE-2026-3427) MEDIUM
- Yoast Seo - Cross-Site Scripting (XSS) (CVE-2026-1293) MEDIUM
- Yoast SEO - Cross-Site Scripting (XSS) (CVE-2026-24591) MEDIUM
- Yoast Seo - Broken Access Control (CVE-2023-28775) MEDIUM
- Yoast SEO - Cross-Site Scripting (XSS) (CVE-2024-4984) MEDIUM
- Yoast Seo - Cross-Site Scripting (XSS) (CVE-2024-4041) MEDIUM
- Yoast Seo - Cross-Site Scripting (XSS) (CVE-2023-40680) MEDIUM
- Yoast Seo - Cross-Site Scripting (XSS) (CVE-2023-32300) HIGH
- Yoast Seo - Cross-Site Scripting (XSS) (CVE-2023-28785) MEDIUM
- Yoast Seo - Security Vulnerability (CVE-2021-25118) MEDIUM
- Yoast Seo - Cross-Site Scripting (XSS) (CVE-2021-24153) MEDIUM
- Yoast Seo - Security Vulnerability (CVE-2019-13478) CRITICAL
- Yoast Seo - Security Vulnerability (CVE-2018-19370) MEDIUM
- Yoast SEO - Cross-Site Scripting (XSS) (CVE-2017-16842) MEDIUM