Remote Code Execution (RCE)

yoast/wordpress-seo is vulnerable to remote code execution. An SEO Manager is able to execute arbitrary OS commands via a ZIP import through a race condition vulnerability in unzipfile in admin/import/class-import-settings.php...

Uber: XSS in people.uber.com

From the HTML source code of http://people.uber.com I came to know that it uses Yoast WordPress SEO plugin v2.1.1 But it is known to suffer from XSS bug. Check it for more details and steps: https://wpvulndb.com/vulnerabilities/8045 Bug can be easily fixed upgrading the plugin. Thanks...

WordPress Yoast 2.1.1 Cross Site Scripting

============================================================ Info ============================================================ Affects: Yoast Wordpress SEO Plugin ============================================================ Vulnerable Code =================================...