{"items":[{"id":"CVE-2026-73387","published":"2026-08-19T12:38:54.622Z","updated":"2026-08-19T15:34:24.261Z","title":"WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability","severity":"HIGH","score":8.1,"vendor":"SmartDataSoft","product":"Resido","kev":false,"epss":0.00467,"kevAdded":null},{"id":"CVE-2025-12882","published":"2026-02-19T03:25:15.804Z","updated":"2026-04-08T17:00:28.424Z","title":"Clasifico Listing <= 2.0 - Unauthenticated Privilege Escalation","severity":"CRITICAL","score":9.8,"vendor":"SmartDataSoft","product":"Clasifico Listing","kev":false,"epss":0.0048,"kevAdded":null},{"id":"CVE-2020-36972","published":"2026-01-28T17:35:11.956Z","updated":"2026-03-05T01:27:14.502Z","title":"SmartBlog 2.0.1 - 'id_post' Blind SQL injection","severity":"HIGH","score":8.8,"vendor":"smartdatasoft","product":"SmartBlog","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2026-22358","published":"2026-01-22T16:52:34.992Z","updated":"2026-04-28T16:48:54.545Z","title":"WordPress Electrician - Electrical Service WordPress theme <= 5.6 - Server Side Request Forgery (SSRF) vulnerability","severity":"MEDIUM","score":5.4,"vendor":"SmartDataSoft","product":"Electrician - Electrical Service WordPress","kev":false,"epss":0.00204,"kevAdded":null},{"id":"CVE-2025-62741","published":"2026-01-22T16:51:47.324Z","updated":"2026-04-28T16:14:03.808Z","title":"WordPress Pool Services theme <= 3.3 - Server Side Request Forgery (SSRF) vulnerability","severity":"MEDIUM","score":5.4,"vendor":"SmartDataSoft","product":"Pool Services","kev":false,"epss":0.0024,"kevAdded":null},{"id":"CVE-2025-58004","published":"2025-09-22T18:24:13.034Z","updated":"2026-04-28T16:13:40.351Z","title":"WordPress DriCub Theme <= 2.9 - Broken Access Control Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"SmartDataSoft","product":"DriCub","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2025-58005","published":"2025-09-22T18:24:12.246Z","updated":"2026-04-28T16:13:40.380Z","title":"WordPress DriCub Theme <= 2.9 - Server Side Request Forgery (SSRF) Vulnerability","severity":"MEDIUM","score":5.4,"vendor":"SmartDataSoft","product":"DriCub","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2025-6994","published":"2025-08-06T03:41:01.031Z","updated":"2026-04-08T17:23:56.955Z","title":"Reveal Listing <= 3.3 - Unauthenticated Privilege Escalation","severity":"CRITICAL","score":9.8,"vendor":"SmartDataSoft","product":"Reveal Listing","kev":false,"epss":0.00435,"kevAdded":null},{"id":"CVE-2025-30997","published":"2025-06-06T12:54:00.439Z","updated":"2026-04-28T16:12:03.328Z","title":"WordPress Car Repair Services theme <= 5.0 - Server Side Request Forgery (SSRF) Vulnerability","severity":"MEDIUM","score":5.4,"vendor":"SmartDataSoft","product":"Car Repair Services","kev":false,"epss":0.00262,"kevAdded":null},{"id":"CVE-2025-1285","published":"2025-03-14T04:22:32.126Z","updated":"2026-04-08T16:45:53.732Z","title":"Resido - Real Estate WordPress Theme <= 3.6 - Missing Authorization to Unauthenticated Server-Side Request Forgery and API Key Settings Update","severity":"MEDIUM","score":5.3,"vendor":"SmartDataSoft","product":"Resido - Real Estate WordPress Theme","kev":false,"epss":0.0028,"kevAdded":null},{"id":"CVE-2025-23857","published":"2025-02-14T12:44:33.569Z","updated":"2026-05-11T23:35:21.477Z","title":"WordPress Essential WP Real Estate Plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"SmartDataSoft","product":"Essential WP Real Estate","kev":false,"epss":0.00255,"kevAdded":null},{"id":"CVE-2024-13318","published":"2025-01-10T11:10:45.380Z","updated":"2026-04-08T16:58:47.869Z","title":"Essential WP Real Estate <= 1.1.3 - Missing Authorization to Arbitrary Post/Page Deletion","severity":"MEDIUM","score":5.3,"vendor":"smartdatasoft","product":"Essential WP Real Estate","kev":false,"epss":0.00349,"kevAdded":null}]}