Vulnerabilities > Squirrly > SEO Plugin BY Squirrly SEO > 8.2.26

DATE CVE VULNERABILITY TITLE RISK
2025-03-27 CVE-2025-22783 SQL Injection vulnerability in Squirrly SEO Plugin BY Squirrly SEO
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SEO Squirrly SEO Plugin by Squirrly SEO allows SQL Injection.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.4.03.
network
low complexity
squirrly CWE-89
8.8
2025-03-07 CVE-2025-1768 SQL Injection vulnerability in Squirrly SEO Plugin BY Squirrly SEO
The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to blind SQL Injection via the 'search' parameter in all versions up to, and including, 12.4.05 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
squirrly CWE-89
6.5
2025-03-03 CVE-2025-24654 Missing Authorization vulnerability in Squirrly SEO Plugin BY Squirrly SEO
Missing Authorization vulnerability in SEO Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.4.05.
network
low complexity
squirrly CWE-862
8.8
2024-08-18 CVE-2024-43286 SQL Injection vulnerability in Squirrly SEO Plugin BY Squirrly SEO
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.19.
network
low complexity
squirrly CWE-89
8.8
2024-07-20 CVE-2024-6497 Cross-site Scripting vulnerability in Squirrly SEO Plugin BY Squirrly SEO
The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 12.3.19 due to insufficient input sanitization and output escaping.
network
low complexity
squirrly CWE-79
6.1
2024-03-27 CVE-2024-29790 Unspecified vulnerability in Squirrly SEO Plugin BY Squirrly SEO
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Squirrly SEO Plugin by Squirrly SEO allows Reflected XSS.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.16.
network
low complexity
squirrly
6.1
2024-03-25 CVE-2022-44626 Missing Authorization vulnerability in Squirrly SEO Plugin BY Squirrly SEO
Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.1.20.
network
low complexity
squirrly CWE-862
6.3
2024-02-05 CVE-2024-0597 Cross-site Scripting vulnerability in Squirrly SEO Plugin BY Squirrly SEO
The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 12.3.15 due to insufficient input sanitization and output escaping.
network
low complexity
squirrly CWE-79
4.8
2023-05-08 CVE-2022-45065 Unspecified vulnerability in Squirrly SEO Plugin BY Squirrly SEO
Unauth.
network
low complexity
squirrly
6.1
2022-11-28 CVE-2022-38140 Unspecified vulnerability in Squirrly SEO Plugin BY Squirrly SEO
Auth.
network
low complexity
squirrly
8.8