Vulnerabilities in cifi
8 resultsCVE-2024-6497HIGHSEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url ParameterEPSS 10.3%CVE-2024-0366MEDIUMStarbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object ReferenceEPSS 0.6%CVE-2024-0597MEDIUMSEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settingsEPSS 0.5%CVE-2025-1768MEDIUMSEO Plugin by Squirrly SEO <= 12.4.05 - Authenticated (Subscriber+) SQL Injection via search ParameterEPSS 0.5%CVE-2023-6806MEDIUMStarbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job SettingsEPSS 0.4%CVE-2024-0256MEDIUMStarbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Display Name and Social SettingsEPSS 0.3%CVE-2026-7624MEDIUMSEO Plugin by Squirrly SEO <= 12.4.16 - Missing Authorization to Authenticated (Contributor+) Privileged Cloud API OperationsEPSS 0.3%CVE-2025-14342MEDIUMSEO Plugin by Squirrly SEO <= 12.4.14 - Missing Authorization to Authenticated (Subscriber+) Cloud Service DisconnectionEPSS 0.3%