CVE-2024-6556

A security flaw exists in SmartCrawl WordPress SEO plugin versions prior to 3.10.8, allowing unauthorized individuals to uncover the full web application path through direct file access. This occurs because mobiledetect is used without adequate protection measures, enabling attackers to exploit this weakness. While the exposed information alone poses no threat, it can be leveraged in conjunction with other vulnerabilities to compromise a website's security.

Based on public CVE data (MITRE/NVD).