CVE-2023-28775

WordPress Yoast SEO Premium plugin <= 20.4 - Unauthenticated Zapier API Key Reset vulnerability

Missing Authorization vulnerability in Yoast Yoast SEO Premium.This issue affects Yoast SEO Premium: from n/a through 20.4.

We have discovered 72,399 live websites that are affected by CVE-2023-28775.

Run a Free Instant Scan



Affected Software

Product  Yoast SEO Premium
Category Search Engine Optimization
Vulnerable Domains72,399 live websites (29% of Yoast SEO Premium install base)
Vulnerable Versions
  • from 0 through 20.4
Vulnerable Versions Count246 versions ( 74% of all versions)


Common Weakness Enumeration

CWE-862 Missing Authorization



Details

  • Published - Jun 11, 2024
  • Updated - Apr 28, 2026

Credits

  • Rafie Muhammad (Patchstack) (finder)

Website Distribution by Country

Number of websites using CVE-2023-28775
United States26,918 websites


Germany4,645 websites
Vietnam3,425 websites
Russia3,330 websites
Iran3,041 websites
GB2,803 websites
France2,417 websites
Italy1,876 websites
Spain1,791 websites
Brazil1,634 websites

Website Distribution by TLD

Number of websites using CVE-2023-28775
.com36,375 websites
.ru2,680 websites
.de1,936 websites
.net1,848 websites
.org1,841 websites
.co.uk1,750 websites
.com.br1,602 websites
.it1,393 websites
.nl1,220 websites
.com.au1,122 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2023-28775

Top websites that are affected by CVE-2023-28775. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***********.com United States*,***
******.com United States*,***
******.com United States*,***
***********.eu Cyprus*,***
*****.com United States*,***
********.net Russia*,***
*****************.org United States*,***
******.com United States*,***
********************.com Cyprus*,***
******.com United States*,***
See full domain list

FAQ

CVE-2023-28775 is Missing Authorization in Yoast SEO Premium
A total of 72,399 websites have been identified as vulnerable to CVE-2023-28775, based on global website indexing conducted by WebTechSurvey.
The Yoast SEO Premium is affected by the CVE-2023-28775 vulnerability.
Yoast SEO Premium versions up to and including 20.4 are vulnerable to CVE-2023-28775.