{"id":"CVE-2023-5949","aliases":["EUVD-2023-58221","GHSA-x98r-x2vh-j7fm"],"status":"published","title":"SmartCrawl WordPress SEO checker \u003c 3.8.3 - Unauthenticated Password Protected Post Disclosure","description":"The SmartCrawl WordPress plugin before 3.8.3 does not prevent unauthorised users from accessing password-protected posts' content.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00756,"percentile":0.55439,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2023-12-18T20:08:03Z","modified":"2026-06-17T06:49:43Z","products":[{"vendor":"unknown","product":"smartcrawl wordpress seo checker, seo analyzer, seo optimizer"},{"vendor":"wpmudev","product":"smartcrawl"},{"vendor":"wpmudev","product":"smartcrawl wordpress seo checker, seo analyzer, seo optimizer"}],"references":[{"url":"https://wpscan.com/vulnerability/3cec27ca-f470-402d-ae3e-271cb59cf407","tags":["exploit","vdb-entry","technical-description","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5949"},{"url":"https://github.com/advisories/GHSA-x98r-x2vh-j7fm"}],"sources":{"cve":[{"id":"CVE-2023-5949","title":"SmartCrawl WordPress SEO checker \u003c 3.8.3 - Unauthenticated Password Protected Post Disclosure","description":"The SmartCrawl WordPress plugin before 3.8.3 does not prevent unauthorised users from accessing password-protected posts' content.","status":"published","published":"2023-12-18T20:08:03.243Z","modified":"2024-08-02T08:14:25.139Z","updated_at":"2026-11-02T14:35:16.771348Z"}],"euvd":[{"id":"EUVD-2023-58221","description":"The SmartCrawl WordPress plugin before 3.8.3 does not prevent unauthorised users from accessing password-protected posts' content.","status":"published","published":"2023-12-18T20:08:03Z","modified":"2024-08-02T08:14:25Z","updated_at":"2026-11-03T03:50:11.066935Z"}],"ghsa":[{"id":"GHSA-x98r-x2vh-j7fm","title":"The SmartCrawl WordPress plugin before 3.8.3 does not prevent unauthorised users from accessing...","description":"The SmartCrawl WordPress plugin before 3.8.3 does not prevent unauthorised users from accessing password-protected posts' content.","status":"published","published":"2023-12-18T21:30:27Z","modified":"2023-12-20T21:30:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:55:15.236949Z"}],"nvd":[{"id":"CVE-2023-5949","description":"The SmartCrawl WordPress plugin before 3.8.3 does not prevent unauthorised users from accessing password-protected posts' content.","status":"published","published":"2023-12-18T20:15:08.703Z","modified":"2026-06-17T06:49:43.487Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:08:56.329586Z"}]}}