CVE-2025-22783

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Mar 27, 2025
Updated: Apr 1, 2025
CWE ID 89

Summary

CVE-2025-22783 is an SQL Injection vulnerability affecting the SEO Plugin by Squirrly SEO, from version n/a through 12.4.03. Malicious users can exploit this issue to inject malicious SQL commands, potentially gaining unauthorized access to sensitive data or taking control of the affected system. The vulnerability arises due to the plugin's failure to neutralize special elements in SQL commands, putting WordPress websites using the SEO Plugin by Squirrly SEO at risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share