Yoast Yoast SEO – Advanced SEO with real-time guidance and built-in AI

• CVE-2026-15425 Medium 6.4 Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name) 0.3%
• CVE-2025-14481 Medium 4.3 Yoast SEO <= 26.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'post_id' Parameter 0.3%
• CVE-2026-3427 Medium 6.4 Yoast SEO <= 27.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute 0.2%
• CVE-2026-1293 Medium 6.4 Yoast SEO <= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute 0.2%
• CVE-2024-4984 Medium 6.4 Yoast SEO <= 22.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.6%
• CVE-2024-4041 Medium 6.1 Yoast SEO <= 22.5 - Reflected Cross-Site Scripting 0.8%