68 matches found
CVE-2025-62048
CVE-2025-62048 affects the WordPress SmartCrawl (SmartCrawl SEO checker) plugin up to version 3.14.3. It is a Missing Authorization/Broken Access Control issue. Public sources (Wordfence & Patchstack) indicate a patch is available and that the vulnerability is Patched; apply the vendor’s patched ...
WordPress plugin SmartCrawl has security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
CVE-2025-62048: Missing Authorization
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo.This issue affects SmartCrawl: from n/a through = 3.14.3...
PT-2025-43350
Name of the Vulnerable Software and Affected Versions SmartCrawl versions through 3.14.3 Description A missing authorization issue exists in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo. The issue concerns a lack of proper authorization checks, potentially allowing...
WordPress SmartCrawl plugin <= 3.14.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Denver Jackson in WordPress Plugin SmartCrawl versions = 3.14.3...
EUVD-2024-31877
Malicious code in bioql PyPI...
EUVD-2024-47629
Malicious code in bioql PyPI...
EUVD-2025-31706
Malicious code in bioql PyPI...
CVE-2025-11163
The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updatesubmodule function in all versions up to, and including, 3.14.3. This makes it possible for authenticated attackers, with...
CVE-2025-11163
The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updatesubmodule function in all versions up to, and including, 3.14.3. This makes it possible for authenticated attackers, with...
CVE-2025-11163
The CVE-2025-11163 entry concerns the SmartCrawl SEO checker, analyzer & optimizer WordPress plugin. It reports a Missing Authorization to Plugin Settings Update vulnerability in all versions up to 3.14.3, enabling authenticated attackers with Subscriber-level access and above to modify the plugi...
CVE-2025-11163 SmartCrawl SEO checker, analyzer & optimizer <= 3.14.3 - Missing Authorization to Plugin Settings Update
The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updatesubmodule function in all versions up to, and including, 3.14.3. This makes it possible for authenticated attackers, with...
CVE-2025-11163 SmartCrawl SEO checker, analyzer & optimizer <= 3.14.3 - Missing Authorization to Plugin Settings Update
The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updatesubmodule function in all versions up to, and including, 3.14.3. This makes it possible for authenticated attackers, with...
WordPress SmartCrawl SEO plugin <= 3.14.3 - Missing Authorization to Plugin Settings Update vulnerability
Missing Authorization to Plugin Settings Update vulnerability discovered by Rafshanzani Suhada in WordPress Plugin SmartCrawl versions = 3.14.3...
CVE-2025-11163: Improper Access Control
The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updatesubmodule function in all versions up to, and including, 3.14.3. This makes it possible for authenticated attackers, with...
WordPress plugin SmartCrawl has a access control error vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An access...
PT-2025-39960
Name of the Vulnerable Software and Affected Versions SmartCrawl SEO plugin for WordPress versions prior to 3.14.4 Description The SmartCrawl SEO plugin for WordPress has an issue where data can be modified without authorization. This is due to a missing capability check within the update submodu...
CVE-2024-3287
The SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer plugin for WordPress is vulnerable to unauthorized ld+json description injection due to a missing capability check on the savesettings function in all versions up to, and including, 3.10.2. This makes it possible for unauthenticate...
CVE-2024-6556
The SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.10.8. This is due the plugin utilizing mobiledetect without preventing direct access to the files. This makes it possible for...