What’s Vulnerable › Products

Yoast SEO – Advanced SEO with real-time guidance and built-in AI vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Yoast SEO – Advanced SEO with real-time guidance and built-in AI version is affected

Latest Yoast SEO – Advanced SEO with real-time guidance and built-in AI vulnerabilities

• CVE-2026-15425 — Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name) (CVSS 6.4)
• CVE-2025-14481 — Yoast SEO <= 26.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'post_id' Parameter (CVSS 4.3)
• CVE-2026-3427 — Yoast SEO <= 27.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute (CVSS 6.4)
• CVE-2026-1293 — Yoast SEO <= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute (CVSS 6.4)
• CVE-2024-4984 — Yoast SEO <= 22.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
• CVE-2024-4041 — Yoast SEO <= 22.5 - Reflected Cross-Site Scripting (CVSS 6.1)