Yoast SEO Premium

Yoast SEO Premium has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 6.4 out of 10.

The most common weakness is Improper Neutralization Of Script-Related HTML Tags In A Web Page (Basic XSS), behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Yoast SEO Premium has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

01234567891009.05.2023Today09.05.20235.3Yoast SEO Premium <= 20.4 - Missing Authorization to Zapier Key Reset CVSS 5.3 · 09.05.202302.10.20256.4Yoast SEO Premium 25.7-25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 02.10.2025

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Yoast SEO Premium vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-11241

Yoast SEO Premium 25.7-25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Showing 1–2 of 2 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C