CVE-2026-59520

CrawlWP SEO versions up to 3.0.16 are vulnerable to a Cross-Site Request Forgery (CSRF) attack, which could allow an attacker to perform unauthorized actions on behalf of authenticated users. This vulnerability poses a medium risk, particularly for web administrators and users who manage sensitive data through the affected plugin. Organizations using this plugin should prioritize applying updates or implementing mitigations to safeguard against potential exploitation.