CVE-2025-28953: WordPress smart SEO plugin <= 4.0 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axiomthemes smart SEO smartSEO allows SQL Injection.This issue affects smart SEO: from n/a through <= 4.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-28953?
CVE-2025-28953 is classified as a high-severity SQL Injection vulnerability that affects AxiomThemes smart SEO versions up to and including 4.0.
How do I fix CVE-2025-28953?
To fix CVE-2025-28953, update AxiomThemes smart SEO to version 4.1 or later, which includes patches for this vulnerability.
What type of vulnerability is CVE-2025-28953?
CVE-2025-28953 is an SQL Injection vulnerability that allows attackers to execute arbitrary SQL commands through improperly neutralized input.
Which software is affected by CVE-2025-28953?
CVE-2025-28953 affects AxiomThemes smart SEO and WordPress smart SEO versions up to 4.0.
What are the potential impacts of CVE-2025-28953?
Exploitation of CVE-2025-28953 can lead to unauthorized access to sensitive data or manipulation of the database.