CVE-2025-62048

MediumCVSS 5.4

Published: 22/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

12th percentile - higher than 12% of all known CVEs

Summary

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo. This issue affects SmartCrawl: from n/a through <= 3.14.3.

Risk Assessment

Missing authorization may allow an attacker to perform unauthorized actions or access sensitive information, potentially leading to a security breach of the site.

Recommendation

Update the SmartCrawl plugin to a version later than 3.14.3 if available to fix the vulnerability.

Other vulnerabilities in SmartCrawl

CVE-2026-110901Medium
The SmartCrawl plugin contains an Authorization Bypass Through User-Controlled Key vulnerability that allows exploitation of incorrectly configured access control security levels. This issue affects versions from n/a through 3.16.4.

Original NVD description (English source)

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo.This issue affects SmartCrawl: from n/a through <= 3.14.3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS