WordPress Yoast SEO Cross Site Scripting

Vulnerability: Stored XSS Vulnerability in Yoast SEO Plugin Impact: High Authors: Hammad Shamsi Company: RHAinfoSEC Website: http://rafayhackingarticles.net & http://blog.sh3ifu.com/ Introduction Yoast SEO formerly known as WordPress SEO by Yoast is the most complete WordPress SEO plugin that...

WordPress SEO by Yoast Plugin <= 3.4.0 - Cross Site Scripting

This plugin is prone to a stored cross site scripting vulnerability. Solution Update the plugin...

Yoast SEO <= 3.4.0 - Authenticated Stored Cross-Site Scripting (XSS)

The changelog reads: "Fixes a stored XSS issue in the Yoast SEO metabox. Thanks Hammad Shamsi for reporting and responsibly disclosing this issue."...

Clicky by Yoast <= 1.5 - Minor Security Improvements

From the changelog: - Only allow expected characters in user settings thanks to a report by Netsparker. - Proper escaping of translated string in image attributes...

WordPress SEO by Yoast Plugin <= 1.4.6 - Bypass

This plugin is prone to a reset settings feature access restriction bypass vulnerability. Solution Update the plugin...

WordPress SEO by Yoast Plugin <= 1.4.4 - Unknown Vulnerability

This plugin is prone to an security issue which allowed any user to reset settings. Solution Update the plugin...

Yoast SEO <= 3.2.5 - Unspecified Cross-Site Scripting (XSS)

Changelog file for version 3.3.0 states "Fixes an XSS issue, props Hristo Pandjarov."...

WordPress SEO by Yoast Plugin <= 3.2.5 - Cross Site Scripting

This plugin is prone to an unspecified cross site scripting vulnerability. Solution Update the plugin...

Uber: XSS in people.uber.com

From the HTML source code of http://people.uber.com I came to know that it uses Yoast WordPress SEO plugin v2.1.1 But it is known to suffer from XSS bug. Check it for more details and steps: https://wpvulndb.com/vulnerabilities/8045 Bug can be easily fixed upgrading the plugin. Thanks...

Yoast SEO <= 3.2.4 - Subscriber Settings Sensitive Data Exposure

The Yoast SEO WordPress plugin was affected by a Subscriber Settings Sensitive Data Exposure security vulnerability...

WordPress SEO by Yoast Plugin <= 3.2.4 - Sensitive Data Exposure

This plugin is prone to a subscriber settings sensitive data exposure vulnerability. Solution Update the plugin...

WordPress Plugin Google Analytics by Yoast HTML Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blogging sites on servers with PHP and MySQL.Google Analytics by Yoast is one of the web analytics plugins available. An HTML injection vulnerability exists i...

WordPress Yoast SEO 1.7.3.3 SQL Injection

SQL Injection vulnerability in WordPress Yoast SEO plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Google Analytics By Yoast Premium 5.4.4 Cross Site Scripting

Details ================ Software: Google Analytics by Yoast Premium Version: 5.4.4 Homepage: https://yoast.com/wordpress/plugins/google-analytics/ Advisory report: https://security.dxw.com/advisories/xss-in-google-analytics-by-yoast-premium-by-privileged-users/ CVE: Awaiting assignment CVSS: 5.5...

WordPress SEO by Yoast 'post-new.php' Plugin HTML Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WordPress SEO by Yoast is one of the search engine optimization plugins. A security vulnerability exists in the...

WordPress SEO by Yoast Plugin Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WordPress SEO by Yoast is one of the search engine optimization plugins. A cross-site scripting vulnerability exist...

Cross site scripting

Cross-site scripting XSS vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin before 2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the posttitle parameter to wp-admin/post-new.php, which is not properly handled in the snippet preview...

CVE-2012-6692

Cross-site scripting XSS vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin before 2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the posttitle parameter to wp-admin/post-new.php, which is not properly handled in the snippet preview...

CVE-2012-6692

CVE-2012-6692 affects WordPress SEO by Yoast plugin for WordPress, prior to version 2.2. The XSS exists in the snippet preview functionality via the post_title parameter to wp-admin/post-new.php, due to inadequate handling in js/wp-seo-metabox.js. A remote attacker could inject arbitrary script/H...

WordPress Yoast 2.1.1 Cross Site Scripting

============================================================ Info ============================================================ Affects: Yoast Wordpress SEO Plugin ============================================================ Vulnerable Code =================================...