CVE-2012-6692: Yoast WordPress Seo

Medium severity, CVSS 4.3. EPSS: 3.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin before 2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the post_title parameter to wp-admin/post-new.php, which is not properly handled in the snippet preview functionality.

Affected products

• Yoast WordPress Seo: up to and including 2.1.1

Published 2015-06-17. Last modified 2026-06-16.