CVE-2026-28117: WordPress smart SEO theme <= 2.9 - Local File Inclusion vulnerability
Published Mar 5, 2026
·Updated
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through <= 2.9.
Affected Software
2 affected components
axiomthemes smart SEO<=2.9
WordPress smart SEO<=2.9
Event History
Mar 5, 2026
CVE Published
via MITRE·05:54 AM
Data Sourced
via MITRE·05:54 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-28117?
CVE-2026-28117 is classified as a high severity vulnerability due to its potential for local file inclusion attacks.
2
How do I fix CVE-2026-28117?
To mitigate CVE-2026-28117, update the AxiomThemes smart SEO theme to version 2.10 or later.
3
What software is affected by CVE-2026-28117?
CVE-2026-28117 affects AxiomThemes smart SEO and WordPress smart SEO versions up to and including 2.9.
4
What type of vulnerability is CVE-2026-28117?
CVE-2026-28117 is a Local File Inclusion vulnerability that allows attackers to include malicious files.
5
Is CVE-2026-28117 exploitable remotely?
Yes, CVE-2026-28117 can be exploited remotely through specially crafted requests.