CVE-2026-110901

MediumCVSS 5.4

Published: 16/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 16/10/2026(UTC)NVD NIST

Summary

The SmartCrawl plugin contains an Authorization Bypass Through User-Controlled Key vulnerability that allows exploitation of incorrectly configured access control security levels. This issue affects versions from n/a through 3.16.4.

Risk Assessment

An unauthenticated user may gain access to functions or data they are not authorized to access, potentially leading to unauthorized changes.

Recommendation

Update the SmartCrawl plugin to the latest version that fixes this vulnerability.

Other vulnerabilities in SmartCrawl

CVE-2025-62048Medium
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo. This issue affects SmartCrawl: from n/a through <= 3.14.3.

Original NVD description (English source)

Authorization Bypass Through User-Controlled Key vulnerability in WPMU DEV SmartCrawl smartcrawl-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SmartCrawl: from n/a through 3.16.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS