Pricing
Case studies
Login
Start trial
Yoast SEO
Yoast
Developer
27.3
Latest version
10,000,000
Installations
No date
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
0 present
19 patched
4 Mitigation rules
Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute vulnerability
<= 27.1.1
23/03/2026
Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute vulnerability
<= 26.8
06/02/2026
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 22.6
16/05/2024
Reflected Cross-Site Scripting vulnerability
<= 22.5
06/05/2024
Cross Site Scripting (XSS) vulnerability
<= 21.0
24/11/2023
Authenticated (Contributor+) DOM-Based Cross-Site Scripting vulnerability
<= 20.2
03/03/2023
Unauthenticated Full Path Disclosure vulnerability
<= 17.2.1
23/02/2022
Authenticated Stored Cross-Site Scripting (XSS) vulnerability
<= 11.5
10/07/2019
Authenticated Command Execution vulnerability
<= 9.1.0
20/11/2018
Unauthenticated Cross-Site Scripting (XSS) vulnerability
<= 5.7.1
20/11/2017
Cross-site Request Forgery (CSRF) Vulnerability
<= 3.3.1
11/05/2017
Cross Site Scripting
<= 3.4.0
03/08/2016
Unknown Vulnerability
<= 1.4.4
28/07/2016
Bypass
<= 1.4.6
28/07/2016
Cross Site Scripting
<= 3.2.5
14/06/2016
Sensitive Data Exposure
<= 3.2.4
06/05/2016
Cross Site Scripting
<= 2.0.1
20/04/2015
Blind SQL Injection
<= 1.7.3.3
16/03/2015
Multiple Vulnerabilities
<= 1.7.3
14/03/2015