SmartDataSoft Vulnerabilities and Affected Products
Vulnerabilities associated with DriCub.
Products
Clear product- DriCub2 vulnerabilities
- Essential WP Real Estate2 vulnerabilities
- SmartBlog2 vulnerabilities
- Car Repair Services1 vulnerability
- Clasifico Listing1 vulnerability
- Electrician - Electrical Service WordPress1 vulnerability
- Pool Services1 vulnerability
- Resido - Real Estate WordPress Theme1 vulnerability
- Reveal Listing1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-58004MEDIUM | WordPress DriCub Theme <= 2.9 - Broken Access Control VulnerabilityMissing Authorization vulnerability in SmartDataSoft DriCub dricub-driving-school allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DriCub: from n/a through <= 2.9. CWE-862Sep 22, 2025 | CVSS5.3v3.1 | EPSS0.247% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-58005MEDIUM | WordPress DriCub Theme <= 2.9 - Server Side Request Forgery (SSRF) VulnerabilityServer-Side Request Forgery (SSRF) vulnerability in SmartDataSoft DriCub dricub-driving-school allows Server Side Request Forgery.This issue affects DriCub: from n/a through <= 2.9. CWE-918Sep 22, 2025 | CVSS5.4v3.1 | EPSS0.194% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |