PLUGIN SECURITY
Is Surbma Yoast Breadcrumb Shortcode safe?
A simple shortcode to include Yoast's breadcrumb function everywhere on your WordPress website.
What this plugin does
- Slug:
surbma-yoast-breadcrumb-shortcode - Author: Surbma
- 3000+ active installs
- 84/100 rating (9 reviews on wordpress.org)
- 39305 all-time downloads
- On WordPress.org since 2015-01-28
breadcrumbshortcodewordpress seoYoastYoast SEO
Maintenance status
- Latest known version: 1.2
- Last updated: 2026-03-27 1:21pm GMT
- Tested up to WordPress: 6.9.7
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
1 known CVE on file for Surbma Yoast Breadcrumb Shortcode. Reported between 2026 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-57764 | Surbma | Yoast SEO Breadcrumb Shortcode [surbma-yoast-breadcrumb-shortcode] <= 1.2 (unfixed) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 1.2 | 1.2 | 2026-07-02 | ✓ fixed in latest |
How to fix it
Keep Surbma Yoast Breadcrumb Shortcode updated — 1.2 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Breadcrumb NavXT — 800000+ active installs — 92/100 (132) — max PHP 8.4
- CrawlWP SEO – Instant Search Engine Indexing & SEO Performance Monitor — 30000+ active installs — 94/100 (60)
- Schema – All In One Schema Rich Snippets — 30000+ active installs — 80/100 (162) — max PHP 8.4
- Flexy Breadcrumb — 10000+ active installs — 94/100 (20) — max PHP 8.4
- Breadcrumb – Breadcrumb for WooCommerce and Custom Post Types — 10000+ active installs — 92/100 (34) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.