Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-66614 2 Squirrly, Wordpress 2 Seo Plugin By Squirrly Seo, Wordpress 2026-08-21 7.1 High
Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.2 versions.
CVE-2022-38140 1 Squirrly 1 Seo Plugin By Squirrly Seo 2026-06-17 7.6 High
Auth. (contributor+) Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin <= 12.1.10 on WordPress.
CVE-2021-25019 1 Squirrly 1 Seo Plugin By Squirrly Seo 2024-11-21 6.1 Medium
The SEO Plugin by Squirrly SEO WordPress plugin before 11.1.12 does not escape the type parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting