High · 8.5 CVE-2024-43286 EUVD-2024-40178GHSA-vrfc-79g7-7m66

WordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerability

Published Aug 18, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Squirrly Product: SEO Plugin by Squirrly SEO

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.19.

Affected products

Vendor	Product	Affected	Fixed
Squirrly	SEO Plugin by Squirrly SEO	≤ 12.3.19	—

References

https://patchstack.com/database/vulnerability/squirrly-seo/wordpress-squirrly-seo-plugin-12-3-19-sql-injection-vulnerability?_s_id=cve vdb-entry