With 5+ million installations, Yoast SEO is incredibility popular.  Yoast fixed a possible command execution by users with SEO Manager roles. The issue was corrected in version 9.2 on 11/20/2018.

What should you do?

Update the Yoast SEO plugin from the WordPress repository immediately.

How can you avoid future problems?

Staying up to date on plugins, themes and WordPress core is crucial for securing your website.  Learn more about our WordPress care plans to help you stay out of trouble.