What’s Vulnerable › Products
SEO Squirrly SEO Plugin by Squirrly SEO vulnerabilities
19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.
Check whether your SEO Squirrly SEO Plugin by Squirrly SEO version is affected
Latest SEO Squirrly SEO Plugin by Squirrly SEO vulnerabilities
- CVE-2026-94076 — WordPress SEO Plugin by Squirrly SEO plugin <= 14.2.5 - PHP Object Injection vulnerability (CVSS 8.8)
- CVE-2026-66614 — WordPress SEO Plugin by Squirrly SEO plugin <= 14.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-66664 — WordPress SEO plugin by Squirrly SEO plugin <= 14.2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-52714 — WordPress SEO Plugin by Squirrly SEO plugin <= 12.4.16 - Broken Access Control vulnerability (CVSS 5.9)
- CVE-2026-7624 — SEO Plugin by Squirrly SEO <= 12.4.16 - Missing Authorization to Authenticated (Contributor+) Privileged Cloud API Operations (CVSS 4.3)
- CVE-2025-14342 — SEO Plugin by Squirrly SEO <= 12.4.14 - Missing Authorization to Authenticated (Subscriber+) Cloud Service Disconnection (CVSS 4.3)
- CVE-2025-22783 — WordPress SEO Plugin by Squirrly SEO plugin <= 12.4.03 - SQL Injection vulnerability (CVSS 8.8)
- CVE-2025-1768 — SEO Plugin by Squirrly SEO <= 12.4.05 - Authenticated (Subscriber+) SQL Injection via search Parameter (CVSS 6.5)
- CVE-2025-24654 — WordPress Squirrly SEO plugin <= 12.4.07 - Broken Access Control vulnerability (CVSS 8.8)
- CVE-2024-10515 — SEO Plugin by Squirrly SEO < 12.3.21 - Editor+ Stored XSS (CVSS 3.5)
- CVE-2024-43286 — WordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerability (CVSS 8.8)
- CVE-2024-6497 — SEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url Parameter (CVSS 6.1)
- CVE-2024-29790 — WordPress Squirrly SEO plugin <= 12.3.16 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2022-44626 — WordPress Squirrly SEO (Peaks) plugin <= 12.1.20 - Broken Access Control vulnerability (CVSS 6.3)
- CVE-2024-0597 — SEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings (CVSS 4.8)
- CVE-2023-50854 — WordPress Squirrly SEO - Advanced Pack Plugin <= 2.3.8 is vulnerable to SQL Injection (CVSS 7.2)
- CVE-2022-45065 — WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.20 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
- CVE-2022-38140 — WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.10 is vulnerable to Arbitrary File Upload (CVSS 8.8)
- CVE-2021-25019 — SEO Plugin by Squirrly SEO < 11.1.12 - Reflected Cross-Site Scripting (CVSS 6.1)