SEO Squirrly

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

SEO Squirrly records in CISA KEV

No SEO Squirrly vulnerabilities are listed in CISA KEV.

4 records

TI-2026-63296 CVE-2026-94076 · GHSA-qw4j-3mfx-55x8

MEDIUM 40

Contributor PHP Object Injection in SEO Plugin by Squirrly SEO <= 14.2.5 versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00344 Published 2026-09-30 No fix listed CWE-502

TI-2026-37835 CVE-2026-52714 · GHSA-9qmf-rqj7-2pp7

LOW 32

Unauthenticated Broken Access Control in SEO Plugin by Squirrly SEO <= 12.4.16 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00171 Published 2026-06-16 No fix listed CWE-862

TI-2026-47335 CVE-2026-66664 · GHSA-8x3x-hpv5-fj9r

LOW 31

Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.0 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-06 No fix listed CWE-79

TI-2026-47285 CVE-2026-66614 · GHSA-p233-84cf-8p2x

LOW 31

Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.2 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-20 No fix listed CWE-79