CVE-2022-2912: Craw-Data Project Craw-Data

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites (SSRF).

Affected products

• Craw-Data Project Craw-Data: up to and including 1.0.0

Published 2022-09-16. Last modified 2026-06-17.