Log in Start free

cifi

Products

ProductCVEsExploitedLatest
SEO Plugin by Squirrly SEO5–Jun 6, 2026
Starbox – the Author Box for Humans3–Feb 20, 2024
GEO Plugin by Squirrly SEO1–Jul 10, 2026

Exploited and recent CVEs

  • CVE-2026-1667 High 7.2 SEO Plugin by Squirrly SEO <= 14.0.0 - Unauthenticated Arbitrary Post Creation and Stored Cross-Site Scripting via savePost() 0.3%
  • CVE-2026-7624 Medium 4.3 SEO Plugin by Squirrly SEO <= 12.4.16 - Missing Authorization to Authenticated (Contributor+) Privileged Cloud API Operations 0.3%
  • CVE-2025-14342 Medium 4.3 SEO Plugin by Squirrly SEO <= 12.4.14 - Missing Authorization to Authenticated (Subscriber+) Cloud Service Disconnection 0.3%
  • CVE-2025-1768 Medium 6.5 SEO Plugin by Squirrly SEO <= 12.4.05 - Authenticated (Subscriber+) SQL Injection via search Parameter 0.5%
  • CVE-2024-6497 High 8.8 SEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url Parameter 11.0%
  • CVE-2023-6806 Medium 6.4 Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job Settings 0.4%
  • CVE-2024-0256 Medium 6.4 Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Display Name and Social Settings 0.3%
  • CVE-2024-0366 Medium 4.3 Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference 0.6%
  • CVE-2024-0597 Medium 4.4 SEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings 0.5%