cifi vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20251
3. 20263

Newest CVEs

• CVE-2026-1667

  SEO Plugin by Squirrly SEO <= 14.0.0 - Unauthenticated Arbitrary Post Creation and Stored Cross-Site Scripting via savePost()

  cifi · GEO Plugin by Squirrly SEO

  High7.2
• CVE-2026-7624

  SEO Plugin by Squirrly SEO <= 12.4.16 - Missing Authorization to Authenticated (Contributor+) Privileged Cloud API Operations

  cifi · SEO Plugin by Squirrly SEO

  Medium4.3
• CVE-2025-14342

  SEO Plugin by Squirrly SEO <= 12.4.14 - Missing Authorization to Authenticated (Subscriber+) Cloud Service Disconnection

  cifi · SEO Plugin by Squirrly SEO

  Medium4.3
• CVE-2025-1768

  SEO Plugin by Squirrly SEO <= 12.4.05 - Authenticated (Subscriber+) SQL Injection via search Parameter

  cifi · SEO Plugin by Squirrly SEO

  Medium6.5
• CVE-2024-6497

  SEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url Parameter

  cifi · SEO Plugin by Squirrly SEO

  High8.8
• CVE-2023-6806

  Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job Settings

  cifi · Starbox – the Author Box for Humans

  Medium6.4
• CVE-2024-0256

  Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Display Name and Social Settings

  cifi · Starbox – the Author Box for Humans

  Medium6.4
• CVE-2024-0366

  Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference

  cifi · Starbox – the Author Box for Humans

  Medium4.3
• CVE-2024-0597

  SEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings

  cifi · SEO Plugin by Squirrly SEO

  Medium4.4