Medium
CVE-2026-15425
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 24
Reset filters
High
CVE-2026-10821
Yoast SEO Premium <= 27.6.0 - Authenticated (Author+) Remote Code Execution
Medium
CVE-2025-14481
Yoast SEO <= 26.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'post_id' Parameter
Medium
CVE-2026-3427
Yoast SEO <= 27.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute
Medium
CVE-2026-1293
Yoast SEO <= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute
Medium
CVE-2026-40722
Yoast SEO Premium <= 26.6 - Missing Authorization
Medium
CVE-2025-11241
Yoast SEO Premium 25.7-25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4984
Yoast SEO <= 22.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4041
Yoast SEO <= 22.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-40680
Yoast SEO <= 21.0 - Authenticated (Seo Manager+) Stored Cross-Site Scripting
Medium
CVE-2023-28775
Yoast SEO Premium <= 20.4 - Missing Authorization to Zapier Key Reset
Medium
c0e58807-bccc-469f-82c3-a4bbf088a626
Yoast SEO <= 20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2021-25118
Yoast SEO <= 17.2 - Full Path Disclosure
Medium
CVE-2019-13478
Yoast SEO <= 11.5 - Authenticated Stored Cross Site Scripting
Medium
CVE-2018-19370
Yoast SEO <= 9.1.0 - Race Condition to Remote Code Execution
Medium
CVE-2017-16842
Yoast SEO <= 5.7.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-24153
Yoast SEO <= 3.4.0 - Authenticated Stored Cross-Site Scripting
Medium
48d0e0e0-81db-46ef-ba64-daa2a4079b79
Yoast SEO <= 3.2.5 - Cross-Site Scripting
Medium
a7701dd2-8452-4529-a931-db2553ca1ae5
Yoast SEO <= 3.2.4 - Sensitive Data Exposure
Medium
2fe34989-493c-4883-a1ca-454262919202
Yoast SEO <= 2.0.1 - Reflected Cross-Site Scripting
High
CVE-2015-2292
Yoast SEO <= 1.7.3.3 - Blind SQL Injection
High
CVE-2015-2293
Yoast SEO <= 1.7.3.3 - Cross-Site Request Forgery
Medium
7d33594b-e7b7-4685-97c1-37a2fecc1b8a
Yoast SEO <= 1.4.6 - Missing Authorization
Medium
CVE-2012-6692
Yoast SEO <= 2.1.1 - Cross Site Scripting via post_title parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.