https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:43:51.016719+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-254103 EUVD-2026-254103 2026-10-06T15:43:51.077459+00:00 EUVD-2026-254103 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11241 fkie_cve-2025-11241 2026-10-06T15:43:51.077500+00:00

The Yoast SEO Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions 25.7 to 25.9 due to a flawed regex used to remove an attribute in post content, which can be abused to inject arbitrary HTML attributes, including JavaScript event handlers. This vulnerability allows a user with Contributor access or higher to create a post containing a malicious JavaScript payload.

 https://cve.radiocsirt.org/vuln/ghsa-q494-c83w-2xrf GHSA-q494-c83w-2xrf 2026-10-06T15:43:51.077535+00:00

The Yoast SEO Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions 25.7 to 25.9 due to a flawed regex used to remove an attribute in post content, which can be abused to inject arbitrary HTML attributes, including JavaScript event handlers. This vulnerability allows a user with Contributor access or higher to create a post containing a malicious JavaScript payload.