Skip to content
Noroxi

Squirrly records

21 published records for vendor squirrly.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
57.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

21 records
  • CVE-2022-38140
    35Monitor

    WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.10 is vulnerable to Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 0%

    squirrly · seo plugin by squirrly seoNov 28, 2022

  • CVE-2025-22783
    35Monitor

    WordPress SEO Plugin by Squirrly SEO plugin <= 12.4.03 - SQL Injection vulnerability

    HighCVSS 8.8Proof of conceptEPSS 0%

    squirrly · seo plugin by squirrly seoMar 27, 2025

  • CVE-2024-43286
    35Monitor

    WordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    squirrly · seo plugin by squirrly seoAug 18, 2024

  • CVE-2025-24654
    35Monitor

    WordPress Squirrly SEO plugin <= 12.4.07 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    squirrly · seo plugin by squirrly seoMar 3, 2025

  • CVE-2024-3679
    30Monitor

    Premium SEO Pack – WP SEO Plugin <= 1.6.002 - Unauthenticated Information Exposure

    HighCVSS 7.5No exploitEPSS 0%

    squirrly · wp seo pluginAug 29, 2024

  • CVE-2023-50854
    28Monitor

    WordPress Squirrly SEO - Advanced Pack Plugin <= 2.3.8 is vulnerable to SQL Injection

    HighCVSS 7.2No exploitEPSS 0%

    squirrly · seo plugin by squirrly seoDec 28, 2023

  • CVE-2024-6497
    27Monitor

    SEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url Parameter

    MediumCVSS 6.1No exploitEPSS 10%

    squirrly · seo plugin by squirrly seoJul 20, 2024

  • CVE-2025-1768
    26Monitor

    SEO Plugin by Squirrly SEO <= 12.4.05 - Authenticated (Subscriber+) SQL Injection via search Parameter

    MediumCVSS 6.5No exploitEPSS 0%

    squirrly · seo plugin by squirrly seoMar 7, 2025

  • CVE-2024-50465
    26Monitor

    WordPress Premium SEO Pack plugin <= 1.6.001 - SQL Injection vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    squirrly · premium seo packOct 28, 2024

  • CVE-2022-44626
    25Monitor

    WordPress Squirrly SEO (Peaks) plugin <= 12.1.20 - Broken Access Control vulnerability

    MediumCVSS 6.3No exploitEPSS 0%

    squirrly · seo plugin by squirrly seoMar 25, 2024

  • CVE-2021-25019
    24Monitor

    SEO Plugin by Squirrly SEO < 11.1.12 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    squirrly · seo plugin by squirrly seoMar 21, 2022

  • CVE-2024-1273
    24Monitor

    Starbox < 3.5.0 - Contributor+ Stored XSS

    MediumCVSS 6.1No exploitEPSS 0%

    squirrly · starboxMar 11, 2024

  • CVE-2024-29790
    24Monitor

    WordPress Squirrly SEO plugin <= 12.3.16 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    squirrly · seo plugin by squirrly seoMar 27, 2024

  • CVE-2022-45065
    24Monitor

    WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.20 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    squirrly · seo plugin by squirrly seoMay 8, 2023

  • CVE-2023-6806
    21Monitor

    Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job Settings

    MediumCVSS 5.4No exploitEPSS 0%

    squirrly · starboxFeb 28, 2024

  • CVE-2024-8239
    21Monitor

    Starbox < 3.5.3 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    squirrly · starboxSep 30, 2024

  • CVE-2024-0256
    21Monitor

    Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Display Name and Social Settings

    MediumCVSS 5.4No exploitEPSS 0%

    squirrly · starboxFeb 7, 2024

  • CVE-2024-0597
    19Monitor

    SEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings

    MediumCVSS 4.8No exploitEPSS 0%

    squirrly · seo plugin by squirrly seoFeb 5, 2024

  • CVE-2024-7955
    19Monitor

    Starbox < 3.5.2 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    squirrly · starboxSep 10, 2024

  • CVE-2024-0366
    17Monitor

    Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference

    MediumCVSS 4.3No exploitEPSS 0%

    squirrly · starboxFeb 5, 2024

  • CVE-2024-10515
    14Monitor

    SEO Plugin by Squirrly SEO < 12.3.21 - Editor+ Stored XSS

    LowCVSS 3.5No exploitEPSS 0%

    squirrly · seo plugin by squirrly seoNov 20, 2024