Lucene search
K

33 matches found

RedhatCVE
RedhatCVE
added 2026/03/06 7:54 a.m.2 views

CVE-2026-28117

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through = 2.9...

8.1CVSS5.8AI score0.00172EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/05 6:30 a.m.3 views

EUVD-2026-9769

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through = 2.9...

8.1CVSS5.9AI score0.00172EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/05 5:54 a.m.27 views

CVE-2026-28117 WordPress smart SEO theme <= 2.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through = 2.9...

8.1CVSS0.00172EPSS
Exploits0References1
CVE
CVE
added 2026/03/05 5:54 a.m.7 views

CVE-2026-28117

CVE-2026-28117: Local File Inclusion in WordPress theme SmartSEO (axiomthemes)

8.1CVSS5.9AI score0.00172EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.3 views

PT-2026-23389

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through = 2.9...

5.9AI score0.00172EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.3 views

WordPress plugin smart SEO 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

8.1CVSS5.8AI score0.00172EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/26 10:36 a.m.4 views

WordPress smart SEO theme <= 2.9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme smart SEO versions = 2.9...

8.1CVSS5.9AI score0.00172EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.3 views

CVE-2025-60059

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through = 2.12...

8.1CVSS7.1AI score0.0011EPSS
Exploits0References1
OSV
OSV
added 2025/12/18 8:16 a.m.2 views

CVE-2025-60059

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through = 2.12...

8.1CVSS5.8AI score0.0011EPSS
Exploits0References1
CVE
CVE
added 2025/12/18 7:22 a.m.7 views

CVE-2025-60059

CVE-2025-60059 affects the WordPress plugin/theme “smart SEO” (WordPress smart SEO theme) &lt;= version 2.12. The issue is an improper control of filenames for Include/Require statements, i.e., a Local File Inclusion (LFI) vulnerability that enables PHP Local File Inclusion. Root cause is insecur...

8.1CVSS6.7AI score0.0011EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/18 7:22 a.m.2 views

CVE-2025-60059 WordPress smart SEO theme <= 2.12 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through = 2.12...

8.1CVSS6.7AI score0.0011EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.2 views

WordPress plugin smart SEO 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in...

8.1CVSS6.5AI score0.0011EPSS
Exploits0References1
CNVD
CNVD
added 2025/11/11 12:0 a.m.1 views

WordPress plugin smart SEO SQL injection vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin smart SEO suffers from a SQL injection vulnerability that stems from the...

8.5CVSS8AI score0.00039EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/07 3:54 p.m.1 views

CVE-2025-28953

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in axiomthemes smart SEO smartSEO allows SQL Injection.This issue affects smart SEO: from n/a through = 4.0...

8.5CVSS7.6AI score0.00039EPSS
Exploits0References1
NVD
NVD
added 2025/11/06 4:15 p.m.2 views

CVE-2025-28953

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in axiomthemes smart SEO smartSEO allows SQL Injection.This issue affects smart SEO: from n/a through = 4.0...

8.5CVSS0.00039EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/06 3:53 p.m.1 views

EUVD-2025-38033

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in axiomthemes smart SEO smartSEO allows SQL Injection.This issue affects smart SEO: from n/a through = 4.0...

7.1AI score0.00039EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/06 3:53 p.m.1 views

CVE-2025-28953 WordPress smart SEO plugin <= 4.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in axiomthemes smart SEO smartSEO allows SQL Injection.This issue affects smart SEO: from n/a through = 4.0...

8.5CVSS7.2AI score0.00039EPSS
Exploits0References1
CVE
CVE
added 2025/11/06 3:53 p.m.9 views

CVE-2025-28953

The CVE-2025-28953 entry corresponds to a SQL Injection in WordPress plugin smart SEO (smartSEO) from axiomthemes, affecting versions up to and including 4.0. The issue is due to improper neutralization of special elements used in an SQL command, enabling potential SQL injection. Documented impac...

8.5CVSS7.2AI score0.00039EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.1 views

PT-2025-45188

Name of the Vulnerable Software and Affected Versions axiomthemes smart SEO versions through 4.0 Description A SQL Injection issue exists in axiomthemes smart SEO. The issue is due to improper neutralization of special elements used in an SQL command. This allows for potential SQL Injection...

8.5CVSS7.5AI score0.00039EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.2 views

WordPress plugin smart SEO SQL注入漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin smart SEO suffers from a SQL injection vulnerability that stems from the...

8.5CVSS7.7AI score0.00039EPSS
Exploits0References1
Rows per page
Query Builder