The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,262
Mitigations16,235
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Yoast SEO<= 28.0
Authenticated (Author+) Stored Cross-Site Scripting vulnerability
6.5
24/07/2026
Surbma | Yoast SEO Breadcrumb Shortcode<= 1.2
Cross Site Scripting (XSS) vulnerability
6.5
02/07/2026
Yoast SEO<= 26.5
Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure vulnerability
4.3
26/05/2026
Yoast SEO<= 27.1.1
Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute vulnerability
6.5
23/03/2026
Duplicate Post<= 4.5
Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite vulnerability
5.4
18/03/2026
Yoast SEO<= 26.8
Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute vulnerability
6.5
06/02/2026
Turn Yoast SEO FAQ Block to Accordion<= 1.0.6
Cross Site Scripting (XSS) vulnerability
6.5
16/01/2026
Yoast SEO Premium<= 26.6
Broken Access Control vulnerability
5.5
15/01/2026
Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimization (image SEO) + Woocommerce<= 2.2.1
WordPress BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce plugin <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
08/01/2026
Yoast SEO Premium25.7-25.9
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
03/10/2025
Yoast SEO<= 22.6
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
16/05/2024
Yoast SEO<= 22.5
Reflected Cross-Site Scripting vulnerability
7.1
06/05/2024
Yoast SEO<= 21.0
Cross Site Scripting (XSS) vulnerability
5.9
24/11/2023
Yoast SEO: Local<= 14.9
Cross Site Scripting (XSS) vulnerability
6.5
24/05/2023
Yoast SEO Premium<= 20.4
Unauthenticated Zapier API Key Reset vulnerability
5.3
09/05/2023
Yoast SEO: Local<= 14.8
Cross Site Request Forgery (CSRF) vulnerability
6.5
09/05/2023
Yoast SEO: Local<= 14.8
Reflected Cross Site Scripting (XSS) vulnerability
7.1
09/05/2023
Yoast SEO<= 20.2
Authenticated (Contributor+) DOM-Based Cross-Site Scripting vulnerability
6.5
03/03/2023
Yoast SEO<= 17.2.1
Unauthenticated Full Path Disclosure vulnerability
5.3
23/02/2022
Yoast SEO<= 11.5
Authenticated Stored Cross-Site Scripting (XSS) vulnerability
6.4
10/07/2019