Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-62048 2 Wordpress, Wpmudev 2 Wordpress, Smartcrawl 2025-10-23 5.4 Medium
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo.This issue affects SmartCrawl: from n/a through <= 3.14.3.
CVE-2025-11163 2 Wordpress, Wpmudev 2 Wordpress, Smartcrawl 2025-10-02 4.3 Medium
The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_submodule() function in all versions up to, and including, 3.14.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's setttings.
CVE-2023-5949 1 Wpmudev 1 Smartcrawl 2024-11-21 7.5 High
The SmartCrawl WordPress plugin before 3.8.3 does not prevent unauthorised users from accessing password-protected posts' content.