https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T03:09:22.463585+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-16979 CVE-2026-16979 — SmartCrawl < 3.16.3 - Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration 2026-10-10T03:09:22.464781+00:00

Affected: Unknown SmartCrawl SEO checker, analyzer & optimizer

The SmartCrawl SEO checker, analyzer & optimizer WordPress plugin before 3.16.3 does not perform capability checks on two of its AJAX actions, allowing users with at least the Subscriber role to read the titles of private and draft posts by ID and to enumerate stored post-meta key names.