The SEO Plugin by Squirrly SEO up to version 12.4.07 contains a Missing Authorization vulnerability (CVE-2025-24654). This flaw allows an attacker with low privileges to bypass authorization controls and perform actions that should require higher privileges. The vulnerability is remotely exploitable over the network without user interaction, with low attack complexity. It impacts confidentiality (low), integrity (high), and does not affect availability. No patch or vendor advisory is currently available to confirm remediation status.

An attacker with low privileges can exploit this vulnerability to perform unauthorized actions that may compromise the integrity of the affected system or data. Confidentiality impact is low, but integrity impact is high, meaning unauthorized changes or manipulations are possible. Availability is not affected. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the plugin's administrative functions to trusted users only and monitor for suspicious activity related to authorization bypass attempts.