Skip to content
Sign in
Not rated

CVE-2021-25118 The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in…

Description

The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.

Affected products and versions

Product Affected versions Fixed in
Yoast SEO 17.3 earliest → < 17.3 17.3
Yoast SEO 16.7 16.7 → latest No fix stated

Other CVEs of Yoast SEO

The 2 CVEs of Yoast SEO →
CVE-2021-24153 A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had… Not rated
Track this CVE