8.5
High
CVE-2025-28953 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axiomthemes…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axiomthemes smart SEO smartSEO allows SQL Injection.This issue affects smart SEO: from n/a through <= 4.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| smart SEO 4.0 | earliest → 4.0 | No fix stated |
Other CVEs of smart SEO
The 4 CVEs of smart SEO →
CVE-2026-28117
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
8.1
High
CVE-2025-60059
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
8.1
High
CVE-2025-49401
Incorrect Privilege Assignment vulnerability in axiomthemes smart SEO smartSEO allows Privilege Escalation.This issue…
9.8
Critical