WordPress Yoast SEO Premium Plugin <= 20.4 is vulnerable to Broken Access Control
The Yoast SEO Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in versions up to, and including, 20.4. This makes it possible for unauthenticated attackers to disconnect a Zapier API Key.
Update to version 20.5 or 20.7
Yoast SEO Premium v20.7 for WordPress Plugin
Yoast SEO Premium v20.7 - May 9, 2023 Enhancements Adds a column to the post overview page which shows whether a post has been marked as cornerstone content. Excludes the website home page from the Orphaned content workout in case the page is a static one. Bugfixes Fixes a bug where a...
www.nulledfrm.com