SEO Plugin by Squirrly SEO <= 12.4.07 is vulnerable to Broken Access Control vulnerability

Contributor

Published
2025-03-02

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 12.4.07. This makes it possible for authenticated attackers, with Contributor-level access and above, to perform an unauthorized action.

CVE

https://www.cve.org/CVERecord?id=CVE-2025-24654

CVSS

Score:7.1

Severity:High

Version: 12.4.07

There is a patch available in v12.4.08 and we strongly recommend you update to this version as soon as possible.