CVE-2024-43286: WordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerability
Published Aug 18, 2024
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.19.
Affected Software
3 affected components
Squirrly SEO SEO Plugin<=12.3.19
Squirrly SEO Squirrly SEO Plugin<=12.3.19
Squirrly SEO Plugin by Squirrly SEO WordPress<12.3.20
Remediation
Information
Update to 12.3.20 or a higher version.
Event History
Aug 18, 2024
CVE Published
via MITRE·09:37 PM
Data Sourced
via MITRE·09:37 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43286?
CVE-2024-43286 is classified as a high severity SQL Injection vulnerability in the Squirrly SEO Plugin.
2
How do I fix CVE-2024-43286?
To mitigate CVE-2024-43286, update the Squirrly SEO Plugin to version 12.3.20 or later.
3
What versions of Squirrly SEO Plugin are affected by CVE-2024-43286?
CVE-2024-43286 affects all versions of the Squirrly SEO Plugin up to and including 12.3.19.
4
What type of vulnerability is CVE-2024-43286?
CVE-2024-43286 is an SQL Injection vulnerability, which allows attackers to execute unauthorized SQL commands.
5
Can CVE-2024-43286 be exploited remotely?
Yes, CVE-2024-43286 can be exploited remotely if the vulnerable Squirrly SEO Plugin is accessible over the internet.