Smartdatasoft
15 CVEs across 12 Smartdatasoft products. Browse Smartdatasoft vulnerabilities, severities, and proof-of-concept exploits.
Smartdatasoft products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-12882 | Critical | 9.8 | 2026-02-19 | The Clasifico Listing plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0. This is due to the plugin allowing user… |
CVE-2020-36972 | High | 8.2 | 2026-01-28 | SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'id_post' parameter of the details controller that allows attackers to extract database inf… |
CVE-2026-22358 | Medium | 5.4 | 2026-01-22 | Server-Side Request Forgery (SSRF) vulnerability in SmartDataSoft Electrician - Electrical Service WordPress electrician allows Server Side Request Forgery.Thi… |
CVE-2025-62741 | Medium | 5.4 | 2026-01-22 | Server-Side Request Forgery (SSRF) vulnerability in SmartDataSoft Pool Services pool-services allows Server Side Request Forgery.This issue affects Pool Servic… |
CVE-2025-58005 | Medium | 5.4 | 2025-09-22 | Server-Side Request Forgery (SSRF) vulnerability in SmartDataSoft DriCub dricub-driving-school allows Server Side Request Forgery.This issue affects DriCub: fr… |
CVE-2025-58004 | Medium | 5.3 | 2025-09-22 | Missing Authorization vulnerability in SmartDataSoft DriCub dricub-driving-school allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-6994 | Critical | 9.8 | 2025-08-06 | The Reveal Listing plugin by smartdatasoft for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.3. This is due to the plugin… |
CVE-2025-30997 | Medium | 5.4 | 2025-06-06 | Server-Side Request Forgery (SSRF) vulnerability in SmartDataSoft Car Repair Services car-repair-services allows Server Side Request Forgery.This issue affects… |
CVE-2024-12725 | Medium | 6.1 | 2025-05-15 | The Clasify Classified Listing WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Refl… |
CVE-2025-1285 | Medium | 5.3 | 2025-03-14 | The Resido - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the delete_api_key and s… |
CVE-2025-23857 | High | 7.1 | 2025-02-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SmartDataSoft Essential WP Real Estate essential-wp-real-… |
CVE-2024-13347 | Medium | 6.8 | 2025-02-03 | The Essential WP Real Estate WordPress plugin through 1.1.3 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Sit… |
CVE-2024-13318 | Medium | 5.3 | 2025-01-10 | The Essential WP Real Estate plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cl_delete_listing_func() functi… |
CVE-2021-37538 | Critical | 9.8 | 2021-08-24 | Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL c… |
CVE-2021-24335 | Medium | 6.1 | 2021-06-01 | The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back… |