CVE-2025-24654
WordPress Squirrly SEO plugin <= 12.4.07 - Broken Access Control vulnerabilityMissing Authorization vulnerability in SEO Squirrly SEO Plugin by Squirrly SEO squirrly-seo.This issue affects SEO Plugin by Squirrly SEO: from n/a through <= 12.4.07.
We have discovered 1,901 live websites that are affected by CVE-2025-24654.
Affected Software
| Product | |
| Category | Search Engine Optimization |
| Vulnerable Domains | 1,901 live websites (20% of Squirrly install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 147 versions ( 90% of all versions) |
Details
- Published - Mar 3, 2025
- Updated - Apr 28, 2026
Credits
- Rafie Muhammad | Patchstack Bug Bounty Program (finder)
CVE References
Website Distribution by Country
Number of websites using CVE-2025-24654 United States | 653 websites |
 Germany | 160 websites |
 GB | 133 websites |
 France | 81 websites |
 Romania | 65 websites |
 Italy | 64 websites |
 Russia | 62 websites |
 Netherlands | 47 websites |
 Australia | 42 websites |
 Poland | 37 websites |
Website Distribution by TLD
Number of websites using CVE-2025-24654| .com | 868 websites |
| .de | 89 websites |
| .co.uk | 75 websites |
| .org | 58 websites |
| .net | 54 websites |
| .ru | 50 websites |
| .it | 42 websites |
| .com.au | 42 websites |
| .fr | 40 websites |
| .nl | 37 websites |
Vulnerable Versions
Vulnerable versions are highlighted in redWebsites affected by CVE-2025-24654
Top websites that are affected by CVE-2025-24654. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| ***********.com | United States | **,*** | |
| ************.com |  Japan | ***,*** | |
| ******.org | United States | ***,*** | |
| ************.net | United States | ***,*** | |
| ***.com | United States | ***,*** | |
| ********.com |  Greece | ***,*** | |
| ***************.gr | Greece | ***,*** | |
| *******.cc |  Malaysia | ***,*** | |
| ********.si |  Slovenia | ***,*** | |
| *********.org | United States | ***,*** |