Description
Auth. (contributor+) Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin <= 12.1.10 on WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Squirrly | SEO Plugin by Squirrly SEO (WordPress plugin) | ≤ 12.1.10 | — |
High · 7.6
CVE-2022-38140
EUVD-2022-40742GHSA-hc7w-4mg9-9fvv
WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.10 is vulnerable to Arbitrary File Upload
Published Nov 28, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack