Yoast Wordpress Seo vulnerabilities
4 known vulnerabilities affecting yoast/wordpress_seo.
Total CVEs
4
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM4
Vulnerabilities
Page 1 of 1
CVE-2015-2292P3MEDIUMCVSS 6.5PoC≤ 1.5.6v1.6.0+9 more2015-03-17
CVE-2015-2292 [MEDIUM] CWE-89 CVE-2015-2292: Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SE
Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) order_by or (2) order parameter in the wpseo_bulk-editor page to wp-admin/admin.php. N
nvd
CVE-2015-2293P4MEDIUMCVSS 6.8≤ 1.5.6v1.6.0+9 more2015-03-17
CVE-2015-2293 [MEDIUM] CWE-352 CVE-2015-2293: Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php
Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remote attackers to hijack the authentication of certain users for requests that conduct SQL injection attacks via the (1) order_by or (2)
nvd
CVE-2012-6692P4MEDIUMCVSS 4.3≤ 2.1.12015-06-17
CVE-2012-6692 [MEDIUM] CWE-79 CVE-2012-6692: Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugi
Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin before 2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the post_title parameter to wp-admin/post-new.php, which is not properly handled in the snippet preview functionality.
nvd
CVE-2017-16842P4MEDIUMCVSS 4.8fixed in 5.8.02017-11-16
CVE-2017-16842 [MEDIUM] CWE-79 CVE-2017-16842: Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Y
Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPress allows remote attackers to inject arbitrary web script or HTML.
nvd