Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Squirrly

First CVE: Mar 21, 2022Active for: 4 yearsTotal CVEs: 21
17.1
VTI Score
Low

Squirrly is a WordPress-focused SEO software vendor whose vulnerability footprint centers on a small number of plugins and extensions, including its flagship SEO plugin and related optimization tools that are integrated into site administration workflows. The recurring exposure clusters around web-application input-handling and access-control weaknesses—specifically cross-site scripting, SQL injection, missing authorization checks, and sensitive information disclosure—that are characteristic of WordPress plugin architecture operating in administratively privileged contexts. The vendor's disclosures span a narrowly scoped but prominently represented product line that reaches a meaningful share of WordPress deployments, making these weakness classes material to site administrators and hosting providers managing WordPress security. Defenders should maintain inventory of Squirrly plugins in use and prioritize updates, as the recurrence of authorization and injection flaws reflects the risks inherent to plugin-based extensibility in WordPress environments. Live severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
21
Total CVEs
More Total CVEs than 96% of tracked vendors
1.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 75% of tracked vendors
6.3
Avg CVSS Score
Higher Avg CVSS Score than 38% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Squirrly over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 21, 2022
4 years ago
Most Recent CVE
Mar 27, 2025
484 days ago

Products(4 total)

Top CVEs

Signals from CVEs in this vendor scope (21 CVEs).

21 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2025-22783HIGH
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SEO Squirrly SEO Plugin by Squirrly SEO squirrly-seo allows SQL Injection.This
Mar 27, 20258.828NONO
CVE-2022-38140HIGH
Auth. (contributor+) Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin <= 12.1.10 on WordPress.
Nov 28, 20228.827NONO
CVE-2024-43286HIGH
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly
Aug 18, 20248.825NONO
CVE-2025-24654HIGH
Missing Authorization vulnerability in SEO Squirrly SEO Plugin by Squirrly SEO squirrly-seo.This issue affects SEO Plugin by Squirrly SEO: from n/a through <= 12.4.07.
Mar 3, 20258.824NONO
CVE-2024-6497MEDIUM
The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 12.3.19 due to insuff
Jul 20, 20246.124NONO
CVE-2024-3679HIGH
The Premium SEO Pack – WP SEO Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.002. This makes it possible for
Aug 29, 20247.522NONO
CVE-2021-25019MEDIUM
The SEO Plugin by Squirrly SEO WordPress plugin before 11.1.12 does not escape the type parameter before outputting it back in an attribute in an admin page, leading to a Reflected
Mar 21, 20226.122NONO
CVE-2022-44626MEDIUM
Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.1.20.
Mar 25, 20246.321NONO
CVE-2022-45065MEDIUM
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Squirrly SEO Plugin by Squirrly SEO plugin <= 12.1.20 versions.
May 8, 20236.121NONO
CVE-2025-1768MEDIUM
The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to blind SQL Injection via the 'search' parameter in all versions up to, and including, 12.4.05 due to insufficien
Mar 7, 20256.520NONO
View all 21 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products21 CVEs
67%
29%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network21 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low21 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None10 (47.6%)
Unknown0 (0.0%)
Required11 (52.4%)
Privileges Required
Low11 (52.4%)
High4 (19.0%)
None6 (28.6%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (21 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Squirrly.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Squirrly — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Squirrly's Products

View all 3 CNAs →

Top CWEs