Unauthorized Schema Injection Vulnerability in SmartCrawl WordPress SEO Plugin

CVE-2024-3287

What is CVE-2024-3287?

The SmartCrawl SEO plugin for WordPress is susceptible to unauthorized ld+json description injection due to inadequate capability checks in the save_settings function. This vulnerability affects all versions up to and including 3.10.2, allowing unauthenticated attackers to manipulate schema types. Exploitation of this flaw can lead to misleading search engine results and potential SEO degradation for affected websites, posing significant risks to site owners and users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References