CVE 8.5 HIGH

WordPress smart SEO plugin <= 4.0 - SQL Injection Vulnerability_CVE-2025-28953

8.5 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axiomthemes smart SEO smartSEO allows SQL Injection.This issue affects smart SEO: from n/a through <= 4.0.

AI Analysis

SQL Injection vulnerability in smart SEO plugin

Basic Information

ID CVE-2025-28953
Source Patchstack
Published Nov 6, 2025 at 15:53
Modified Nov 10, 2025 at 16:16

Affected Product

Vendor axiomthemes
Product smart SEO
Version n/a
Affected Versions axiomthemes smart SEO n/a

CWE Classification

AI Assessment

AI Score 8.5 / 10
AI Severity High
Vendor AxiomThemes
Product smart SEO
Version <= 4.0

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.