Advisories · Technology

Yoast SEO Premium.

Every CVE that names Yoast SEO Premium among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-10821 CVE record

CVSS 6.6 Medium

Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCE
- Yoast SEO Premium
- Other injection
Not analysed yet 2 Sept 2026
CVE-2025-11241 CVE record

CVSS 6.4 Medium

Yoast SEO Premium 25.7-25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
- Yoast SEO Premium
- Cross-site scripting (XSS)
Not analysed yet 3 Oct 2025
CVE-2023-28775 CVE record

CVSS 5.3 Medium

WordPress Yoast SEO Premium plugin <= 20.4 - Unauthenticated Zapier API Key Reset vulnerability
- Yoast SEO Premium
- Broken access control
Not analysed yet 11 Jun 2024