CVE-2021-24153

A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as alert but bypasses were found.

• CWE-79
• CWE-79

• https://packetstormsecurity.com/files/138192/Exploit, Third Party Advisory, VDB Entry
• https://plugins.trac.wordpress.org/changeset/1466243/wordpress-seoThird Party Advisory
• https://wpscan.com/vulnerability/77810044-394d-4314-b9a1-20c7dca726dcThird Party Advisory
• https://packetstormsecurity.com/files/138192/Exploit, Third Party Advisory, VDB Entry
• https://plugins.trac.wordpress.org/changeset/1466243/wordpress-seoThird Party Advisory
• https://wpscan.com/vulnerability/77810044-394d-4314-b9a1-20c7dca726dcThird Party Advisory

Published

Apr 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-24148A business logic issue in the MStore API WordPress plugin, v…9.8
• CVE-2021-24149Unvalidated input in the Modern Events Calendar Lite WordPre…8.8
• CVE-2021-2415Vulnerability in the Oracle Time and Labor product of Oracle…8.1
• CVE-2021-24150The LikeBtn WordPress Like Button Rating ♥ LikeBtn WordPress…7.5
• CVE-2021-24151The WP Editor WordPress plugin before 1.2.7 did not sanitise…7.2
• CVE-2021-24152The "All Subscribers" setting page of Popup Builder was vuln…6.1
• CVE-2021-24154The Theme Editor WordPress plugin before 2.6 did not validat…4.9
• CVE-2021-24155The WordPress Backup and Migrate Plugin – Backup Guard WordP…7.2
• CVE-2021-24156Stored Cross-Site Scripting vulnerabilities in Testimonial R…5.4
• CVE-2021-24157Orbit Fox by ThemeIsle has a feature to add custom scripts t…5.4
• CVE-2021-24158Orbit Fox by ThemeIsle has a feature to add a registration f…6.5
• CVE-2021-24159Due to the lack of sanitization and lack of nonce protection…8.8