Filtered by vendor Wpmudev Subscriptions
Filtered by product Smartcrawl Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-11163 2 Wordpress, Wpmudev 2 Wordpress, Smartcrawl 2025-10-02 4.3 Medium
The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_submodule() function in all versions up to, and including, 3.14.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's setttings.
CVE-2023-5949 1 Wpmudev 1 Smartcrawl 2024-11-21 7.5 High
The SmartCrawl WordPress plugin before 3.8.3 does not prevent unauthorised users from accessing password-protected posts' content.