Skip to content
Cifi vulnerabilities
Newest
-
cifi geo plugin by squirrly seo
SEO Plugin by Squirrly SEO <= 14.0.0 - Unauthenticated Arbitrary Post Creation and Stored Cross-Site Scripting via savePost()
CVE-2026-1667
7.2 High
-
cifi seo plugin by squirrly seo, seo squirrly plugin by squirrly seo +1 more
SEO Plugin by Squirrly SEO <= 12.4.16 - Missing Authorization to Authenticated (Contributor+) Privileged Cloud API Operations
CVE-2026-7624
4.3 Medium
-
cifi seo plugin by squirrly seo, seo squirrly plugin by squirrly seo +1 more
SEO Plugin by Squirrly SEO <= 12.4.14 - Missing Authorization to Authenticated (Subscriber+) Cloud Service Disconnection
CVE-2025-14342
4.3 Medium
-
cifi seo plugin by squirrly seo, seo squirrly plugin by squirrly seo +1 more
SEO Plugin by Squirrly SEO <= 12.4.05 - Authenticated (Subscriber+) SQL Injection via search Parameter
CVE-2025-1768
6.5 Medium
-
cifi seo plugin by squirrly seo, seo squirrly plugin by squirrly seo, cifi seo plugin by squirrley seo +2 more
SEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url Parameter
CVE-2024-6497
EPSS 11.0%
8.8 High
-
squirrly starbox, cifi starbox – the author box for humans +1 more
Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job Settings
CVE-2023-6806
6.4 Medium
-
squirrly starbox, cifi starbox – the author box for humans +1 more
Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Display Name and Social Settings
CVE-2024-0256
6.4 Medium
-
cifi starbox – the author box for humans, squirrly starbox +1 more
Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference
CVE-2024-0366
4.3 Medium
-
cifi seo plugin by squirrly seo, seo squirrly plugin by squirrly seo +1 more
SEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
CVE-2024-0597
4.4 Medium