All 4 CVE vulnerabilities found in Yoast SEO Premium, with AI-generated Chinese analysis, references, and POCs.
Vendor: Yoast
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-10821 | Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCE | 6.6 | Medium | 2026-09-02 |
| CVE-2026-40722 | WordPress Yoast SEO Premium plugin <= 26.6 - Broken Access Control vulnerability CWE-862 | 5.5 | Medium | 2026-06-17 |
| CVE-2025-11241 | Yoast SEO Premium 25.7-25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-80 | 6.4 | Medium | 2025-10-03 |
| CVE-2023-28775 | WordPress Yoast SEO Premium plugin <= 20.4 - Unauthenticated Zapier API Key Reset vulnerability CWE-862 | 5.3 | Medium | 2024-06-11 |
All 4 known CVE vulnerabilities affecting Yoast SEO Premium with full Chinese analysis, references, and POCs where available.