cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2024-3287,https://securityvulnerability.io/vulnerability/CVE-2024-3287,Unauthorized Schema Injection Vulnerability in SmartCrawl WordPress SEO Plugin,"The SmartCrawl SEO plugin for WordPress is susceptible to unauthorized ld+json description injection due to inadequate capability checks in the save_settings function. This vulnerability affects all versions up to and including 3.10.2, allowing unauthenticated attackers to manipulate schema types. Exploitation of this flaw can lead to misleading search engine results and potential SEO degradation for affected websites, posing significant risks to site owners and users.",Wordpress,"Smartcrawl WordPress Seo Checker, Seo Analyzer, Seo Optimizer",5.3,MEDIUM,0.0004299999854993075,false,,false,false,false,,false,false,2024-05-02T16:52:26.946Z,0 CVE-2023-5949,https://securityvulnerability.io/vulnerability/CVE-2023-5949,SmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post Disclosure,"The SmartCrawl plugin, by WPMU DEV, prior to version 3.8.3, is susceptible to a security flaw that enables unauthorized users to gain access to the content of password-protected posts. This vulnerability presents a significant risk for website owners relying on the plugin to safeguard sensitive information, as it breaches the intended access controls.",Wordpress,"SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer",7.5,HIGH,0.0015800000401213765,false,,false,false,false,,false,false,2023-12-18T20:15:00.000Z,0