CVE-2024-6497

概要

参考情報

• plugins.trac.wordpress.org/browser/squirrly-seo/trunk/controllers/Api.php · Product
• plugins.trac.wordpress.org/changeset/3121853 · Patch
• wordpress.org/plugins/squirrly-seo · Product
• wordfence.com/threat-intel/vulnerabilities/id/bb3aa613-8f34-4d96-8ddf-41fcdcf65c59 · Third Party Advisory
• nowotarski.info/wordpress-nonce-authorization · Exploit

seo plugin by squirrly seo のその他の脆弱性

• CVE-2025-22783高 8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SEO Squirrly SEO Plugin by Squirrly SE…
• CVE-2025-1768中 6.5The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to blind SQL Injection via the 'search' parameter in all versions up to, a…
• CVE-2025-24654高 8.8Missing Authorization vulnerability in SEO Squirrly SEO Plugin by Squirrly SEO squirrly-seo.This issue affects SEO Plugin by Squirrly SEO: f…
• CVE-2024-10515低 3.5In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that allows you to imple…
• CVE-2024-43286高 8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Squirrly SEO Plugin by Squirrly SEO.Th…