Description
WordPress Plugin Yoast SEO is prone to an information disclosure vulnerability. Attackers can exploit this issue to disclose plugin settings and post metadata relative to focus and terms keywords. WordPress Plugin Yoast SEO version 3.2.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.2.5 or latest
References
https://www.wordfence.com/blog/2016/05/yoast-seo-vulnerability/
https://www.pluginvulnerabilities.com/2016/05/11/information-disclosure-vulnerability-in-yoast-seo/
Related Vulnerabilities
Python CVE-2018-1060 Vulnerability (CVE-2018-1060)
WordPress Plugin Max Mega Menu Cross-Site Scripting (2.3.8)
WordPress Plugin LiveSig 'wp-root' Parameter Remote File Include (0.4)
WordPress 3.8.3 Multiple Vulnerabilities (3.8 - 3.8.3)
WordPress Plugin Powerplay Gallery 'upload.php' Arbitrary File Upload (3.2)