PLUGIN SECURITY
Is Yoast SEO Premium safe?
Real-time SEO guidance, schema, and AI built in. Help search engines and AI systems understand your content. All AI tools included, no hidden fees.
What this plugin does
- Slug:
wordpress-seo-premium - Author: Yoast
- 10000000+ active installs
- 96/100 rating (27819 reviews on wordpress.org)
- 996097993 all-time downloads
- On WordPress.org since 2010-10-11
Content analysisReadabilityschemaseoxml sitemap
Maintenance status
- Latest known version: 28.2
- Last updated: 2026-09-01 6:03am GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
5 known CVEs on file for Yoast SEO Premium. Reported between 2019 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-10821 | Yoast SEO Premium [wordpress-seo-premium] < 27.6.1 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | Medium 6.6 | < 27.6.1 | 27.6.1 | 2026-09-02 | ✓ fixed in latest |
| CVE-2026-40722 | Yoast SEO Premium [wordpress-seo-premium] < 26.7 | Missing Authorization | Medium 5.5 | < 26.7 | 26.7 | 2026-06-17 | ✓ fixed in latest |
| CVE-2025-11241 | Yoast SEO Premium [wordpress-seo-premium] >= 25.7 - < 26.0 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | Medium 6.4 | 25.7–26.0 | 26.0 | 2025-10-02 | ✓ fixed in latest |
| CVE-2023-28775 | Yoast SEO Premium [wordpress-seo-premium] < 20.5 | Missing Authorization | Medium 5.3 | < 20.5 | 20.5 | 2023-05-09 | ✓ fixed in latest |
| CVE-2019-13478 | Yoast SEO Premium [wordpress-seo-premium] < 11.6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Critical 9.8 | < 11.6 | 11.6 | 2019-07-09 | ✓ fixed in latest |
| — | Yoast SEO Premium [wordpress-seo-premium] < 2.1 | — | Unknown | < 2.1 | 2.1 | — | ✓ fixed in latest |
How to fix it
Keep Yoast SEO Premium updated — 28.2 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- BoldGrid Easy SEO – Simple and Effective SEO — 40000+ active installs — 60/100 (3) — max PHP 8.4
- Semrush SEO Writing Assistant — 9000+ active installs — 56/100 (25)
- Turn Rank Math FAQ Block to Accordion — 5000+ active installs — 100/100 (2)
- Turn Yoast SEO FAQ Block to Accordion — 3000+ active installs — 100/100 (5)
- Post Admin Word Count — 2000+ active installs — 70/100 (6)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.