Description

WordPress Plugin Remove Yoast SEO comments is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin Remove Yoast SEO comments version 1.0.4 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.0.5 or latest

References

https://www.jitbit.com/alexblog/256-targetblank---the-most-underestimated-vulnerability-ever/

https://core.trac.wordpress.org/ticket/36809

https://wordpress.org/plugins/remove-yoast-seo-comments/changelog/

Related Vulnerabilities

WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages Unspecified Vulnerability (1.4.1)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-26120)

XOOPS Other Vulnerability (CVE-2005-0743)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9701)

WordPress Plugin PromoBar by BestWebSoft Cross-Site Scripting (1.1.0)

Severity

High

Tags

Missing Update