WordPress Vulnerability Scanner WPSec
Vulnerabilities / GEO Plugin by Squirrly SEO

GEO Plugin by Squirrly SEO vulnerabilities

Advisories WPSec published for GEO Plugin by Squirrly SEO. Other sources may list more. Its attack surface: GEO Plugin by Squirrly SEO on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-04 WPSEC-2026-0427 GEO Plugin by Squirrly SEO < 14.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via sq_keyword Custom Field Medium 6.4 14.2.7
2026-10-04 WPSEC-2026-0426 GEO Plugin by Squirrly SEO < 14.2.7 - Authenticated (Editor+) Missing Authorization to Arbitrary Plugin Settings Update Low 2.7 14.2.7
2026-10-04 WPSEC-2026-0425 GEO Plugin by Squirrly SEO < 14.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Facebook Pixel Code Medium 6.4 14.2.7
2026-10-04 WPSEC-2026-0424 GEO Plugin by Squirrly SEO < 14.2.7 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Page SEO Modification Medium 4.3 14.2.7
2026-10-04 WPSEC-2026-0423 GEO Plugin by Squirrly SEO < 14.2.7 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure Medium 4.3 14.2.7
2026-10-04 WPSEC-2026-0422 GEO Plugin by Squirrly SEO < 14.2.7 - Authenticated (Editor+) Arbitrary File Read via Favicon Setting Medium 4.9 14.2.7

License: CC BY 4.0