The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions.
We have discovered 223,795 live websites that are affected by CVE-2019-13478.
| Product | |
| Category | Search Engine Optimization |
| Vulnerable Domains | 223,795 live websites (5.65% of Yoast SEO install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 182 versions ( 46% of all versions) |
| 53,395 websites | |
| 19,823 websites | |
| 18,164 websites | |
| 16,518 websites | |
| 10,500 websites | |
| 9,708 websites | |
| 7,607 websites | |
| 7,476 websites | |
| 7,375 websites | |
| 5,290 websites |
| .com | 88,534 websites |
| .it | 11,428 websites |
| .de | 10,918 websites |
| .ru | 7,999 websites |
| .fr | 7,779 websites |
| .co.uk | 7,271 websites |
| .nl | 6,289 websites |
| .pl | 6,111 websites |
| .org | 5,893 websites |
| .net | 5,183 websites |
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| ***.********.com | *** | ||
| ************.com | *,*** | ||
| *******.fm | *,*** | ||
| ************.com | *,*** | ||
| *********.com | *,*** | ||
| ******.com | **,*** | ||
| *****.jp | **,*** | ||
| ********.gr | **,*** | ||
| *******.com | **,*** | ||
| *******************.ro | **,*** |