Squirrly SEO Plugin Vulnerable to SQL Injection Attacks

CVE-2024-43286

Summary

An SQL Injection vulnerability exists in the Squirrly SEO Plugin, a widely used tool for optimizing SEO performance on WordPress sites. This vulnerability arises from improper neutralization of special elements used in SQL commands, allowing attackers to inject malicious SQL queries. If exploited, the flaw can lead to unauthorized access to sensitive data and manipulation of the database. Users of the Squirrly SEO Plugin, particularly those using versions from n/a through 12.3.19, are at risk and should take steps to mitigate potential attacks.

References