SEO Plugin by Squirrly SEO, CVE-2025-14342

CVE, Research URL: CVE-2025-14342
Home page URL: Security reports for SEO Plugin by Squirrly SEO
Application: SEO Plugin by Squirrly SEO
Published on: Feb 19, 2026
Research Description: The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the sq_ajax_uninstall function in all versions up to, and including, 12.4.14. This makes it possible for authenticated attackers, with Subscriber-level access and above, to disconnect the site from Squirrly's cloud service.
Affected versions: max 12.4.15.
Status: vulnerable