CVE-2026-59520

MediumCVSS 4.3

Published: 05/07/2026(UTC)Updated: 06/07/2026(UTC)Translated: 07/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

The CrawlWP SEO WordPress plugin contains a CSRF vulnerability that allows an attacker to perform unauthorized actions on behalf of an administrator. The issue affects versions from n/a through 3.0.16.

Risk Assessment

An attacker can exploit CSRF to modify SEO settings, inject malicious content, or take over the website without the administrator's knowledge.

Recommendation

Immediately update the CrawlWP SEO plugin to the latest available version and implement CSRF tokens and request validation mechanisms.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) vulnerability in properfraction CrawlWP SEO allows Cross Site Request Forgery. This issue affects CrawlWP SEO: from n/a through 3.0.16.