SmartDataSoft
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Essential WP Real Estate | 2 | – | Feb 14, 2025 |
| DriCub | 2 | – | Sep 22, 2025 |
| Electrician - Electrical Service WordPress | 1 | – | Jan 22, 2026 |
| Pool Services | 1 | – | Jan 22, 2026 |
| Resido | 1 | – | Aug 19, 2026 |
| Resido - Real Estate WordPress Theme | 1 | – | Mar 14, 2025 |
| Reveal Listing | 1 | – | Aug 6, 2025 |
| Car Repair Services | 1 | – | Jun 6, 2025 |
| SmartBlog | 1 | – | Jan 28, 2026 |
| Clasifico Listing | 1 | – | Feb 19, 2026 |
Exploited and recent CVEs
- CVE-2026-73387 WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability 0.5%
- CVE-2025-12882 Clasifico Listing <= 2.0 - Unauthenticated Privilege Escalation 0.5%
- CVE-2020-36972 SmartBlog 2.0.1 - 'id_post' Blind SQL injection 0.3%
- CVE-2026-22358 WordPress Electrician - Electrical Service WordPress theme <= 5.6 - Server Side Request Forgery (SSRF) vulnerability 0.2%
- CVE-2025-62741 WordPress Pool Services theme <= 3.3 - Server Side Request Forgery (SSRF) vulnerability 0.2%
- CVE-2025-58004 WordPress DriCub Theme <= 2.9 - Broken Access Control Vulnerability 0.3%
- CVE-2025-58005 WordPress DriCub Theme <= 2.9 - Server Side Request Forgery (SSRF) Vulnerability 0.2%
- CVE-2025-6994 Reveal Listing <= 3.3 - Unauthenticated Privilege Escalation 0.4%
- CVE-2025-30997 WordPress Car Repair Services theme <= 5.0 - Server Side Request Forgery (SSRF) Vulnerability 0.3%
- CVE-2025-1285 Resido - Real Estate WordPress Theme <= 3.6 - Missing Authorization to Unauthenticated Server-Side Request Forgery and API Key Settings Update 0.3%
- CVE-2025-23857 WordPress Essential WP Real Estate Plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-13318 Essential WP Real Estate <= 1.1.3 - Missing Authorization to Arbitrary Post/Page Deletion 0.3%