In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Squirrly Seo Plugin | — | Update squirrly-seo plugin to version 12.3.21, or a newer patched version | May 15, 2025 | Oct 30, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence HubRespond faster and outpace attackers. Taking command of your attack surface starts here.
Respond faster and outpace attackers. Taking command of your attack surface starts here.