CVE-2025-49293

Missing Authorization vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Generator crawlomatic-multipage-scraper-post-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crawlomatic Multisite Scraper Post Generator: from n/a through <= 2.6.8.2.

Score

CVSS 3.1 4.3 Medium

Status

Deferred - audit@patchstack.com

Published

2025-06-06

Last modified

2026-04-28

Weaknesses

CWE-862

Affected products

• Crawlomatic Multisite Scraper Post Generator (Coderevolution)

References

• https://patchstack.com/database/Wordpress/Plugin/crawlomatic-multipage-scraper-post-generator/vulnerability/wordpress-c…