Team Yoast

Products

ProductCVEsExploitedLatest
Custom field finder1–Apr 29, 2024
Yoast SEO1–Nov 30, 2023

Exploited and recent CVEs

  • CVE-2024-33641 Medium 5.4 WordPress Custom field finder plugin <= 0.3 - PHP Object Injection vulnerability 0.3%
  • CVE-2023-40680 Medium 5.9 WordPress Yoast SEO Plugin <= 21.0 is vulnerable to Cross Site Scripting (XSS) 0.4%