CVE-2021-25118

Name of the Vulnerable Software and Affected Versions Yoast SEO WordPress plugin versions 16.7 through 17.2

Description The issue discloses the full internal path of featured images in posts via the "wp/v2/posts" REST endpoints, which could help an attacker identify other vulnerabilities or assist in the exploitation of other identified vulnerabilities.

Recommendations For versions 16.7 through 17.2, update to version 17.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "wp/v2/posts" endpoint until the update is applied.