WordPress Yoast SEO Plugin Serious Vulnerability Fixed

[engine]

Update your Yoast SEO plugin right away to ensure your WordPress site doesn't become a hacked statistic.

A remote unauthenticated attacker could use this vulnerability to execute arbitrary SQL queries on the victim WordPress web site by enticing an authenticated admin, editor or author user to click on a specially crafted link or visit a page they control.

One possible attack scenario would be an attacker adding their own administrative user to the target WordPress site, allowing them to compromise the entire web site. WordPress Yoast SEO Plugin Serious Vulnerability [grahamcluley.com]

link fixed

[edited by: engine at 9:44 am (utc) on Mar 16, 2015]

[Planet13]

Thanks for the heads up!

[bwnbwn]

The link in the post doesn't work here is the good link
[wptavern.com...]

[alika]

It auto-updated for those with versions 1.5+