Squirrly
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| SEO Plugin by Squirrly SEO | 4 | – | Aug 18, 2024 |
| SEO Plugin by Squirrly SEO (WordPress plugin) | 1 | – | Nov 28, 2022 |
| Squirrly SEO - Advanced Pack | 1 | – | Dec 28, 2023 |
Exploited and recent CVEs
- CVE-2024-43286 WordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerability 0.5%
- CVE-2024-29790 WordPress Squirrly SEO plugin <= 12.3.16 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2022-44626 WordPress Squirrly SEO (Peaks) plugin <= 12.1.20 - Broken Access Control vulnerability 0.4%
- CVE-2023-50854 WordPress Squirrly SEO - Advanced Pack Plugin <= 2.3.8 is vulnerable to SQL Injection 0.5%
- CVE-2022-45065 WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.20 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2022-38140 WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.10 is vulnerable to Arbitrary File Upload 0.8%