CVE-2025-60059: WordPress smart SEO theme <= 2.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through <= 2.12.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60059?
CVE-2025-60059 is classified as a high severity vulnerability due to its potential for remote file inclusion attacks.
How do I fix CVE-2025-60059?
To fix CVE-2025-60059, you should update the smartSEO plugin to a version later than 2.12.
What systems are affected by CVE-2025-60059?
CVE-2025-60059 affects versions of the smart SEO plugin in WordPress up to and including version 2.12.
What type of vulnerability is CVE-2025-60059?
CVE-2025-60059 is categorized as a PHP Remote File Inclusion vulnerability which enables potential unauthorized file access.
Is CVE-2025-60059 exploitable?
Yes, CVE-2025-60059 is exploitable and can allow attackers to execute arbitrary PHP code by including malicious files.