smarty
Security Risk Profile
36
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 33 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 29, 2005 to present
33
Total CVEs
27
Critical+High
0
Exploited
14
Unpatched
Threat Assessment
Avg CVSS
8.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
14
Critical/High
Risk Level
36/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
12High
15Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Code Injection
8
2
XSS
6
3
Input Validation
5
4
Path Traversal
3
Most Affected Products
1. Smarty smarty1015
2. composer/smarty/smarty25
3. Debian Debian Linux20
4. debian/smarty310
5. Fedoraproject Fedora9
Recent Vulnerabilities
See more →CVE-2026-62996
CVSS 6.9medium
Smarty Security stream restriction bypass through stream: resource
8/7/2026
CVE-2023-41661
CVSS 5.9medium
WordPress Smarty for WordPress Plugin <= 3.1.35 is vulnerable to Cross Site Scripting (XSS)
9/29/2023🔧 No Patch
CVE-2023-28447
CVSS 7.1high
Cross site scripting vulnerability in Javascript escaping in smarty/smarty
3/28/2023
CVE-2018-25047
CVSS 5.4medium
9/14/2022
CVE-2022-29221
CVSS 8.8high
PHP Code Injection by malicious block or filename in Smarty
5/17/2022
CVE-2021-21408
CVSS 8.8high
Access to restricted PHP code by dynamic static class access in smarty
1/10/2022
CVE-2021-29454
CVSS 8.8high
Sandbox Escape by math function in smarty
1/10/2022
CVE-2021-26120
CVSS 9.8critical
1/24/2021
CVE-2021-26119
CVSS 7.5high
1/24/2021
CVE-2011-1028
CVSS 9.8critical
11/20/2019
Monitor smarty in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.