Squirrly kayıtları
squirrly üreticisine ait 21 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %57,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')6
- CWE-862 Missing Authorization2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-284 Improper Access Control1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
21 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2022-38140İstismar yok | WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.10 is vulnerable to Arbitrary File Uploadsquirrly · seo plugin by squirrly seo · CWE-434 | Yüksek8,8 | — | %0,8 | 28 Kas 2022 |
35İzleyin | CVE-2025-22783Kavram kanıtı | WordPress SEO Plugin by Squirrly SEO plugin <= 12.4.03 - SQL Injection vulnerabilitysquirrly · seo plugin by squirrly seo · CWE-89 | Yüksek8,8 | — | %0,6 | 27 Mar 2025 |
35İzleyin | CVE-2024-43286İstismar yok | WordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerabilitysquirrly · seo plugin by squirrly seo · CWE-89 | Yüksek8,8 | — | %0,5 | 18 Ağu 2024 |
35İzleyin | CVE-2025-24654İstismar yok | WordPress Squirrly SEO plugin <= 12.4.07 - Broken Access Control vulnerabilitysquirrly · seo plugin by squirrly seo · CWE-862 | Yüksek8,8 | — | %0,3 | 3 Mar 2025 |
30İzleyin | CVE-2024-3679İstismar yok | Premium SEO Pack – WP SEO Plugin <= 1.6.002 - Unauthenticated Information Exposuresquirrly · wp seo plugin · CWE-200 | Yüksek7,5 | — | %0,4 | 29 Ağu 2024 |
28İzleyin | CVE-2023-50854İstismar yok | WordPress Squirrly SEO - Advanced Pack Plugin <= 2.3.8 is vulnerable to SQL Injectionsquirrly · seo plugin by squirrly seo · CWE-89 | Yüksek7,2 | — | %0,5 | 28 Ara 2023 |
27İzleyin | CVE-2024-6497İstismar yok | SEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url Parametersquirrly · seo plugin by squirrly seo · CWE-89 | Orta6,1 | — | %11,0 | 20 Tem 2024 |
26İzleyin | CVE-2025-1768İstismar yok | SEO Plugin by Squirrly SEO <= 12.4.05 - Authenticated (Subscriber+) SQL Injection via search Parametersquirrly · seo plugin by squirrly seo · CWE-89 | Orta6,5 | — | %0,5 | 7 Mar 2025 |
26İzleyin | CVE-2024-50465İstismar yok | WordPress Premium SEO Pack plugin <= 1.6.001 - SQL Injection vulnerabilitysquirrly · premium seo pack · CWE-89 | Orta6,5 | — | %0,4 | 28 Eki 2024 |
25İzleyin | CVE-2022-44626İstismar yok | WordPress Squirrly SEO (Peaks) plugin <= 12.1.20 - Broken Access Control vulnerabilitysquirrly · seo plugin by squirrly seo · CWE-862 | Orta6,3 | — | %0,4 | 25 Mar 2024 |
24İzleyin | CVE-2021-25019İstismar yok | SEO Plugin by Squirrly SEO < 11.1.12 - Reflected Cross-Site Scriptingsquirrly · seo plugin by squirrly seo · CWE-79 | Orta6,1 | — | %0,8 | 21 Mar 2022 |
24İzleyin | CVE-2024-1273İstismar yok | Starbox < 3.5.0 - Contributor+ Stored XSSsquirrly · starbox · CWE-79 | Orta6,1 | — | %0,4 | 11 Mar 2024 |
24İzleyin | CVE-2024-29790İstismar yok | WordPress Squirrly SEO plugin <= 12.3.16 - Reflected Cross Site Scripting (XSS) vulnerabilitysquirrly · seo plugin by squirrly seo · CWE-79 | Orta6,1 | — | %0,4 | 27 Mar 2024 |
24İzleyin | CVE-2022-45065İstismar yok | WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.20 is vulnerable to Cross Site Scripting (XSS)squirrly · seo plugin by squirrly seo · CWE-79 | Orta6,1 | — | %0,4 | 8 May 2023 |
21İzleyin | CVE-2023-6806İstismar yok | Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job Settingssquirrly · starbox · CWE-79 | Orta5,4 | — | %0,4 | 28 Şub 2024 |
21İzleyin | CVE-2024-8239İstismar yok | Starbox < 3.5.3 - Contributor+ Stored XSSsquirrly · starbox · CWE-79 | Orta5,4 | — | %0,4 | 30 Eyl 2024 |
21İzleyin | CVE-2024-0256İstismar yok | Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Display Name and Social Settingssquirrly · starbox · CWE-79 | Orta5,4 | — | %0,3 | 7 Şub 2024 |
19İzleyin | CVE-2024-0597İstismar yok | SEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settingssquirrly · seo plugin by squirrly seo · CWE-79 | Orta4,8 | — | %0,5 | 5 Şub 2024 |
19İzleyin | CVE-2024-7955İstismar yok | Starbox < 3.5.2 - Admin+ Stored XSSsquirrly · starbox · CWE-79 | Orta4,8 | — | %0,4 | 10 Eyl 2024 |
17İzleyin | CVE-2024-0366İstismar yok | Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Referencesquirrly · starbox · CWE-284 | Orta4,3 | — | %0,6 | 5 Şub 2024 |
14İzleyin | CVE-2024-10515İstismar yok | SEO Plugin by Squirrly SEO < 12.3.21 - Editor+ Stored XSSsquirrly · seo plugin by squirrly seo · CWE-79 | Düşük3,5 | — | %0,3 | 20 Kas 2024 |
- CVE-2022-3814035İzleyin
WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.10 is vulnerable to Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %1squirrly · seo plugin by squirrly seo28 Kas 2022
- CVE-2025-2278335İzleyin
WordPress SEO Plugin by Squirrly SEO plugin <= 12.4.03 - SQL Injection vulnerability
YüksekCVSS 8,8Kavram kanıtıEPSS %1squirrly · seo plugin by squirrly seo27 Mar 2025
- CVE-2024-4328635İzleyin
WordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1squirrly · seo plugin by squirrly seo18 Ağu 2024
- CVE-2025-2465435İzleyin
WordPress Squirrly SEO plugin <= 12.4.07 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0squirrly · seo plugin by squirrly seo3 Mar 2025
- CVE-2024-367930İzleyin
Premium SEO Pack – WP SEO Plugin <= 1.6.002 - Unauthenticated Information Exposure
YüksekCVSS 7,5İstismar yokEPSS %0squirrly · wp seo plugin29 Ağu 2024
- CVE-2023-5085428İzleyin
WordPress Squirrly SEO - Advanced Pack Plugin <= 2.3.8 is vulnerable to SQL Injection
YüksekCVSS 7,2İstismar yokEPSS %1squirrly · seo plugin by squirrly seo28 Ara 2023
- CVE-2024-649727İzleyin
SEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url Parameter
OrtaCVSS 6,1İstismar yokEPSS %11squirrly · seo plugin by squirrly seo20 Tem 2024
- CVE-2025-176826İzleyin
SEO Plugin by Squirrly SEO <= 12.4.05 - Authenticated (Subscriber+) SQL Injection via search Parameter
OrtaCVSS 6,5İstismar yokEPSS %1squirrly · seo plugin by squirrly seo7 Mar 2025
- CVE-2024-5046526İzleyin
WordPress Premium SEO Pack plugin <= 1.6.001 - SQL Injection vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0squirrly · premium seo pack28 Eki 2024
- CVE-2022-4462625İzleyin
WordPress Squirrly SEO (Peaks) plugin <= 12.1.20 - Broken Access Control vulnerability
OrtaCVSS 6,3İstismar yokEPSS %0squirrly · seo plugin by squirrly seo25 Mar 2024
- CVE-2021-2501924İzleyin
SEO Plugin by Squirrly SEO < 11.1.12 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1squirrly · seo plugin by squirrly seo21 Mar 2022
- CVE-2024-127324İzleyin
Starbox < 3.5.0 - Contributor+ Stored XSS
OrtaCVSS 6,1İstismar yokEPSS %0squirrly · starbox11 Mar 2024
- CVE-2024-2979024İzleyin
WordPress Squirrly SEO plugin <= 12.3.16 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0squirrly · seo plugin by squirrly seo27 Mar 2024
- CVE-2022-4506524İzleyin
WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.20 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0squirrly · seo plugin by squirrly seo8 May 2023
- CVE-2023-680621İzleyin
Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job Settings
OrtaCVSS 5,4İstismar yokEPSS %0squirrly · starbox28 Şub 2024
- CVE-2024-823921İzleyin
Starbox < 3.5.3 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0squirrly · starbox30 Eyl 2024
- CVE-2024-025621İzleyin
Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Display Name and Social Settings
OrtaCVSS 5,4İstismar yokEPSS %0squirrly · starbox7 Şub 2024
- CVE-2024-059719İzleyin
SEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
OrtaCVSS 4,8İstismar yokEPSS %0squirrly · seo plugin by squirrly seo5 Şub 2024
- CVE-2024-795519İzleyin
Starbox < 3.5.2 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0squirrly · starbox10 Eyl 2024
- CVE-2024-036617İzleyin
Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference
OrtaCVSS 4,3İstismar yokEPSS %1squirrly · starbox5 Şub 2024
- CVE-2024-1051514İzleyin
SEO Plugin by Squirrly SEO < 12.3.21 - Editor+ Stored XSS
DüşükCVSS 3,5İstismar yokEPSS %0squirrly · seo plugin by squirrly seo20 Kas 2024