What is GHSA-rx4h-9w25-87vh?

GHSA-rx4h-9w25-87vh is a security advisory published by GitHub Security Advisories with Medium severity. The SmartCrawl SEO checker, analyzer \u0026 optimizer WordPress plugin before 3.16.3 does not perform...

Which CVE IDs does GHSA-rx4h-9w25-87vh cover?

GHSA-rx4h-9w25-87vh covers the following CVE IDs: CVE-2026-16979. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rx4h-9w25-87vh?

GHSA-rx4h-9w25-87vh has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-rx4h-9w25-87vhMediumCVSS 4.3

The SmartCrawl SEO checker, analyzer & optimizer WordPress plugin before 3.16.3 does not perform...

Vendor

GitHub Security Advisories

Published

August 19, 2026

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-16979 →

📋 Description

The SmartCrawl SEO checker, analyzer & optimizer WordPress plugin before 3.16.3 does not perform capability checks on two of its AJAX actions, allowing users with at least the Subscriber role to read the titles of private and draft posts by ID and to enumerate stored post-meta key names.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-16979
https://wpscan.com/vulnerability/c9eb27aa-c5f9-4f1c-b87c-337ebaf192dd
https://github.com/advisories/GHSA-rx4h-9w25-87vh