Cifi

9 CVEs across 3 Cifi products. Browse Cifi vulnerabilities, severities, and proof-of-concept exploits.

Cifi products with known CVEs

ProductCVEs
Seo Plugin By Squirrly Seo5
Starbox – The Author Box For Humans3
Geo Plugin By Squirrly Seo1
Cifi CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-1667High7.22026-07-10The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Arbitrary Post Creation and Stored Cross-Site Scripting in all versions up to, and includi…
CVE-2026-7624Medium4.32026-06-06The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 12.4.16. This is due to the plu…
CVE-2025-14342Medium4.32026-02-19The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the sq_ajax_uninsta…
CVE-2025-1768Medium6.52025-03-07The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to blind SQL Injection via the 'search' parameter in all versions up to, and including, 12.4…
CVE-2024-6497High8.82024-07-20The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including…
CVE-2023-6806Medium6.42024-02-29The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Job Settings user profile fields in all versions up to, and including, 3…
CVE-2024-0256Medium6.42024-02-07The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Profile Display Name and Social Settings in all versions up to, and inclu…
CVE-2024-0597Medium4.42024-02-05The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 12.3.15…
CVE-2024-0366Medium4.32024-02-05The Starbox – the Author Box for Humans plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.4.7 via…