Yext Plugin
Yext Plugin has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Yext Plugin has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nabil Irawan. Yext Plugin is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.0.14.
CVE-2025-60129Yext <= 1.1.3 - Missing Authorization
Read the full analysisVulnerability Records

Yext Plugin
Author
Yext
The Yext plugin lets you display content from the Yext Platform on your WordPress site quickly and easily. You decide what information you would like to include, how it looks, and where it appears on your site. Add your business content to your site with a single shortcode Just as Yext publishes your business information on leading search sites, you can now display your featured products and services, menus, staff bios, and calendars on your website. Simply choose the content you would like to include, use the provided shortcode to embed it on your site, and Yext takes care of the rest. Post to your website and social networks Have news that you would like to share on both your website and social network pages? Use the Yext plugin to showcase posts that you create for your site and for your Yext-enabled pages on Facebook, Google+, and Foursquare. Automatically update your content via the Yext Platform As soon as you make changes to your embedded content’s data in the Yext Platform, your edits are synced to your website. No need to recreate your edits within WordPress or get a new shortcode. Customize the appearance of your embedded content to fit your brand You can change how your content looks as easily as you can change the content, itself. Choose one of our pre-built themes, or select a font, text color, background color, and more to match your branding. To use the Yext plugin, you must have an active Yext subscription. With the Yext Local Marketing Cloud, you can update, sync, enhance, and monitor your business listings across the web. To learn more about Yext and see how your business appears on local search sites, visit www.yext.com. NOTE: There will no longer be maintenance or support for this plugin beyond version 6.0. Instead of the plugin, please install Widgets directly into your site using an embed code by following the instructions from our documentation: https://help.yext.com/hc/en-us/articles/115005974443-Widget-Installation-Methods-
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C