WordPress Plugin Vulnerabilities

Yoast SEO < 3.3.0 - Unspecified Cross-Site Scripting (XSS)

Description

Changelog file for version 3.3.0 states "Fixes an XSS issue, props Hristo Pandjarov."

Affects Plugins

Plugin icon
wordpress-seo
Fixed in 3.3.0

References

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
a8217395-3fba-4bf7-b5d6-38b17d71803b

Timeline

Publicly Published
2016-06-14 (about 9 years ago)
Added
2016-07-28 (about 9 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2025-04-22
Title
MPL-Publisher < 2.18.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-11-12
Title
Product Delivery Date for WooCommerce - Lite < 2.8.1 - Reflected Cross-Site Scripting
Published
2015-04-21
Title
All In One WP Security And Firewall < 3.9.5 - XSS
Published
2026-01-10
Title
Logo Slider <= 4.9.0 - Authenticated (Author+) Stored Cross-Site Scripting
Published
2024-01-25
Title
Elementor Addons by Livemesh < 8.3.2 - Contributor+ Stored XSS