WordPress plugin
GEO Plugin by Squirrly SEO security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 20 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High7
- Medium13
- Low0
All GEO Plugin by Squirrly SEO vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Authenticated (Contributor+) PHP Object Injection ≤14.2.5Update to 14.2.6 | CVE-2026-94076 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤14.2.2Update to 14.2.3 | CVE-2026-66614 | |
| High7.2 | Unauthenticated Arbitrary Post Creation and Stored Cross-Site Scripting via savePost() ≤14.0.0Update to 14.0.1 | CVE-2026-1667 | |
| High8.8 | Authenticated (Contributor+) SQL Injection via url Parameter ≤12.3.19Update to 12.3.20 | CVE-2024-6497 | |
| High8.8 | Authenticated (Contributor+) Arbitrary File Upload ≤12.1.10Update to 12.1.11 | CVE-2022-38140 | |
| High7.3 | Missing Authorization Checks <6.1.5Update to 6.1.5 | — | |
| High7.5 | Directory Traversal <6.1.5Update to 6.1.5 | — |
- High7.5Authenticated (Contributor+) PHP Object Injection
≤14.2.5Update to 14.2.6
- High7.2Unauthenticated Stored Cross-Site Scripting
≤14.2.2Update to 14.2.3
- High7.2Unauthenticated Arbitrary Post Creation and Stored Cross-Site Scripting via savePost()
≤14.0.0Update to 14.0.1
- High8.8Authenticated (Contributor+) SQL Injection via url Parameter
≤12.3.19Update to 12.3.20
- High8.8Authenticated (Contributor+) Arbitrary File Upload
≤12.1.10Update to 12.1.11
- High7.3Missing Authorization Checks
<6.1.5Update to 6.1.5
- High7.5Directory Traversal
<6.1.5Update to 6.1.5
GEO Plugin by Squirrly SEO: common questions
Does GEO Plugin by Squirrly SEO have known vulnerabilities?
Yes. VulnCrest Radar lists 20 known vulnerabilities in GEO Plugin by Squirrly SEO: 7 high, 13 medium. None are known to affect version null.
How do I check which version of GEO Plugin by Squirrly SEO I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent GEO Plugin by Squirrly SEO vulnerability?
CVE-2026-94076, published Sep 24, 2026: GEO Plugin by Squirrly SEO <= 14.2.5 - Authenticated (Contributor+) PHP Object Injection. Severity: High (CVSS 7.5).
Is any GEO Plugin by Squirrly SEO vulnerability listed in CISA KEV?
No. None of the known GEO Plugin by Squirrly SEO vulnerabilities is currently listed in the CISA KEV catalog.