← All advisories

Critical severity9.8NVD Advisory· Published Jul 9, 2019· Updated Jun 17, 2026

CVE-2019-13478

CVE-2019-13478

Description

The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

Yoast/Yoast Seo5 versions
cpe:2.3:a:yoast:yoast_seo:*:*:*:*:*:wordpress:*:*+ 4 more
- cpe:2.3:a:yoast:yoast_seo:*:*:*:*:*:wordpress:*:*range: <11.6
- cpe:2.3:a:yoast:yoast_seo:11.6:rc1:*:*:*:wordpress:*:*
- cpe:2.3:a:yoast:yoast_seo:11.6:rc2:*:*:*:wordpress:*:*
- cpe:2.3:a:yoast:yoast_seo:11.6:rc3:*:*:*:wordpress:*:*
- cpe:2.3:a:yoast:yoast_seo:11.6:rc4:*:*:*:wordpress:*:*
WordPress/Yoast SEO plugindescription
WordPress/Yoast Seollm-fuzzy
Range: <11.6-RC5

Patches

Vulnerability mechanics

References

2

wpvulndb.com/vulnerabilities/9445nvdThird Party Advisory
github.com/Yoast/wordpress-seo/releases/tag/11.6-RC5nvdRelease Notes

News mentions

0

No linked articles in our index yet.