Unauthorized Data Modification in SmartCrawl SEO Plugin for WordPress

CVE-2025-11163

What is CVE-2025-11163?

The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is affected by a vulnerability that allows for unauthorized modifications of plugin settings. This occurs due to a missing capability check in the update_submodule() function. Authenticated users with Subscriber-level access and higher can exploit this flaw to alter plugin configurations. Users are advised to update to the latest version to mitigate risks associated with this vulnerability.

References