WordPress plugin
Crawlomatic Multipage Scraper Post Generator security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High1
- Medium2
- Low0
All Crawlomatic Multipage Scraper Post Generator vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode Attribute ≤2.7.2Update to 2.7.3 | CVE-2026-9009 | |
| Medium4.3 | Missing Authorization ≤2.6.8.2Update to 2.6.9 | CVE-2025-49293 | |
| Medium5.3 | Unauthenticated Information Exposure via Log Files ≤2.6.8.2Update to 2.6.9 | CVE-2025-49294 | |
| Critical9.8 | Unauthenticated Arbitrary File Upload ≤2.6.8.1Update to 2.6.8.2 | CVE-2025-4389 |
- High8.8Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode Attribute
≤2.7.2Update to 2.7.3
- Medium4.3Missing Authorization
≤2.6.8.2Update to 2.6.9
- Medium5.3Unauthenticated Information Exposure via Log Files
≤2.6.8.2Update to 2.6.9
- Critical9.8Unauthenticated Arbitrary File Upload
≤2.6.8.1Update to 2.6.8.2
Crawlomatic Multipage Scraper Post Generator: common questions
Does Crawlomatic Multipage Scraper Post Generator have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Crawlomatic Multipage Scraper Post Generator: 1 critical, 1 high, 2 medium. None are known to affect version null.
How do I check which version of Crawlomatic Multipage Scraper Post Generator I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Crawlomatic Multipage Scraper Post Generator vulnerability?
CVE-2026-9009, published May 27, 2026: Crawlomatic Multipage Scraper Post Generator <= 2.7.2 - Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode Attribute. Severity: High (CVSS 8.8).
Is any Crawlomatic Multipage Scraper Post Generator vulnerability listed in CISA KEV?
No. None of the known Crawlomatic Multipage Scraper Post Generator vulnerabilities is currently listed in the CISA KEV catalog.