8.1
High
CVE-2026-28117 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through <= 2.9.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| smart SEO 2.9 | earliest → 2.9 | No fix stated |
Other CVEs of smart SEO
The 4 CVEs of smart SEO →
CVE-2025-60059
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
8.1
High
CVE-2025-28953
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axiomthemes…
8.5
High
CVE-2025-49401
Incorrect Privilege Assignment vulnerability in axiomthemes smart SEO smartSEO allows Privilege Escalation.This issue…
9.8
Critical