CVE-2025-11163
BaseFortify
Publication date: 2025-09-30
Last updated on: 2025-10-02
Assigner: Wordfence
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| smartcrawl | seo | 3.14.3 |
| smartcrawl | seo | 3.14.4 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-284 | The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the SmartCrawl SEO WordPress plugin up to version 3.14.3, where the update_submodule() function lacks a proper capability check. This means that authenticated users with as low as Subscriber-level access can modify the plugin's settings without proper authorization. The issue arises because the function does not verify if the user has sufficient permissions before allowing updates, enabling unauthorized modification of data. [1, 2]
How can this vulnerability impact me? :
The vulnerability allows attackers with Subscriber-level access or higher to update the SmartCrawl SEO plugin's settings without proper authorization. This could lead to unauthorized changes in SEO configurations, potentially degrading website performance, affecting search engine rankings, or introducing malicious configurations. Although it does not allow code execution or data disclosure, it compromises the integrity of the plugin's settings.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by checking if the SmartCrawl SEO plugin version installed is 3.14.3 or earlier, as these versions lack the necessary capability and nonce checks in the update_submodule() function. You can verify the plugin version via WordPress admin dashboard or by running a command to check the plugin version in the WordPress installation directory, for example: `grep 'Version:' wp-content/plugins/smartcrawl-seo/smartcrawl-seo.php`. Additionally, monitoring for unauthorized POST requests to the AJAX action `wp_ajax_smartcrawl_update_options_{module_id}` without proper capability or nonce validation could indicate exploitation attempts. However, no specific network commands are provided in the resources. [1, 2]
What immediate steps should I take to mitigate this vulnerability?
The immediate mitigation step is to update the SmartCrawl SEO plugin to version 3.14.4 or later, where the vulnerability is fixed by adding capability checks (`current_user_can('manage_options')`) and nonce verification (`wp_verify_nonce()`) in the update_submodule() function. These changes prevent unauthorized users from modifying plugin settings. Until the update is applied, restrict access to users with Subscriber-level access or higher and monitor for suspicious activity related to plugin settings updates. [1]