SmartMag vulnerabilities

2 known vulnerabilities in SmartMag from ThemeSphere. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SmartMag: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-64216Oct 29, 2025ThemeSphere

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeSphere SmartMag smart-mag allows PHP Local File Inclusion.This issue affects SmartMag: from n/a through <= 10.3.0.

• 7.5 High severity

  SmartMag: Missing Authorization

  CVE-2024-37930Aug 12, 2024ThemeSphere

  Insertion of Sensitive Information into Log File vulnerability in ThemeSphere SmartMag smartmag-responsive-retina-wordpress-magazine.This issue affects SmartMag: from n/a through < 10.1.0.