Aller au contenu
Se connecter
Non notée

CVE-2021-25118 The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in…

Description

The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.

Produits et versions touchés

Produit Versions touchées Corrigé en
Yoast SEO 17.3 premières → < 17.3 17.3
Yoast SEO 16.7 16.7 → dernières Pas de correctif indiqué

Autres CVE de Yoast SEO

Les 2 CVE de Yoast SEO →
CVE-2021-24153 A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had… Non notée
Suivre cette CVE