WordPress Plugin Vulnerabilities

Yoast SEO <= 9.1 - Authenticated Race Condition

Description

According to the changelog,

"Race Condition which leads to command execution, by users with SEO Manager roles."

Affects Plugins

Fixed in 9.2

References

Classification

Type
RCE
OWASP top 10
CWE

Miscellaneous

Original Researcher
Dimopoulos Ilias
Submitter
Dimopoulos Ilias
Submitter twitter
Verified
No

Timeline

Publicly Published
2018-11-20 (about 7 years ago)
Added
2018-11-20 (about 7 years ago)
Last Updated
2020-10-02 (about 5 years ago)

Other