WP Clinic
Log in Sign up

CVE · Medium

CVE-2023-28775 — Yoast SEO Premium [wordpress-seo-premium] < 20.5

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-28775 Yoast SEO Premium [wordpress-seo-premium] < 20.5 Missing Authorization Medium 5.3 < 20.5 20.5 2023-05-09

CVE-2023-28775

The Yoast SEO Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in versions up to, and including, 20.4. This makes it possible for unauthenticated attackers to disconnect a Zapier API Key.

Source: Wordfence

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.