Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: axiomthemes Component: Smartseo Clear all filters
TI-2025-37425 CVE-2025-60059 · GHSA-v63g-pgjc-73m7

WordPress smart SEO theme <= 2.12 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00499 Published 2025-12-18 No fix listed CWE-98
TI-2025-20896 CVE-2025-28953 · GHSA-xfwx-x943-x38c

WordPress smart SEO plugin <= 4.0 - SQL Injection Vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axiomthemes smart SEO smartSEO allows SQL Injection.This issue affects smart SEO: from n/a through <= 4.0.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00331 Published 2025-11-06 No fix listed CWE-89