Yoast Duplicate Post, CVE-2026-53740

CVE, Research URL: CVE-2026-53740
Home page URL: Security reports for Yoast Duplicate Post
Application: Yoast Duplicate Post
Published on: Jun 11, 2026
Research Description: Yoast Duplicate Post through 4.6 inserts an unescaped post title and permalink into the Classic Editor scheduled republish notice. Attackers can schedule a republish copy with a crafted title to execute script when an administrator views the resulting notice.
Affected versions: max 4.6.
Status: vulnerable