Products: 7
    Vulnerabilities: 26
    Known Exploited: 0
    1
    Critical Level Threats
    1
    High Level Threats
    23
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-15425

    Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name)

    Last Modified: Jul 27, 2026
    Published: Jul 25, 2026

    CVE-2026-53739

    Yoast Duplicate Post through 4.6 Cross-Site Request Forgery via duplicate_post_dismiss_notice

    Last Modified: Jun 11, 2026
    Published: Jun 10, 2026

    CVE-2025-14481

    Yoast SEO <= 26.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'post_id' Parameter

    Last Modified: May 27, 2026
    Published: May 27, 2026

    CVE-2026-3427

    Yoast SEO <= 27.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute

    Last Modified: Apr 24, 2026
    Published: Mar 22, 2026

    CVE-2026-1217

    Yoast Duplicate Post <= 4.5 - Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite

    Last Modified: Apr 22, 2026
    Published: Mar 18, 2026
    Items Per Page
    Yoast Vulnerabilities & Security CVEs | CVE-DB