WordPress Squirrly SEO Plugin <= 14.2.2 XSS Vulnerability Advisory

Medium Priority Cross-Site Scripting (XSS) Vulnerability in WordPress SEO Plugin by Squirrly SEO Plugin <= 14.2.2 Vulnerability Overview Vulnerability Type: Cross-Site Scripting (XSS) Priority: Medium Affected Versions: <= 14.2.2 Fixed Version: 14.2.3 Impact Scope Risk Description: This vulnerability poses a medium-level threat and is expected to be exploited. Similar vulnerabilities are frequently used in large-scale attack campaigns, where attackers compromise thousands of websites simultaneously, regardless of their traffic volume or popularity. User Interaction Required: Requires action by privileged users, such as clicking malicious links, visiting spoofed pages, or submitting forms. Potential Impact: Malicious actors can inject malicious scripts, such as redirections, advertisements, and other HTML payloads, which are executed when visitors access the website. Remediation Immediate Action: Update the affected plugin. If updating is not possible, contact your hosting provider or website developer for assistance. Automatic Mitigation: Patchstack has released mitigation rules to block any attacks until the fixed version is applied. Version Update: Update to version 14.2.3 or higher to resolve the vulnerability. Patchstack users can enable automatic updates, targeting only vulnerable plugins. Detailed Information Software: SEO Plugin by Squirrly SEO Type: Plugin Affected Versions: <= 14.2.2 Fixed Version: 14.2.3 Timeline Reporter: daroo Report Date: August 19, 2026 Additional Information How to Get the Fastest Protection: Patchstack offers automatic mitigation and version update services. How to Mitigate the Vulnerability: Through automatic mitigation rules and version updates. Why Hackers Target My Website: Hackers exploit vulnerabilities for large-scale attacks. What If My Website Is Already Compromised: Immediately update the plugin or contact your hosting provider. Subscription Weekly WordPress Security Intelligence: Subscribe to receive the latest security information.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Squirrly SEO Plugin <= 14.2.2 XSS Vulnerability Advisory