Security Advisory

CVE-2021-25118

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-02-28 09:06:38
Last updated 2024-08-03 19:56:10
Assigner WPScan
State PUBLISHED

Description

The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.