Unauthorized Data Modification in SmartCrawl SEO Plugin for WordPress
CVE-2025-11163
4.3MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 30 September 2025
What is CVE-2025-11163?
The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is affected by a vulnerability that allows for unauthorized modifications of plugin settings. This occurs due to a missing capability check in the update_submodule() function. Authenticated users with Subscriber-level access and higher can exploit this flaw to alter plugin configurations. Users are advised to update to the latest version to mitigate risks associated with this vulnerability.
Affected Version(s)
SmartCrawl SEO checker, analyzer & optimizer * <= 3.14.3
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Rafshanzani Suhada