SERPed.net
SERPed.net has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 3 disclosures.
The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include PHP Remote File Inclusion, SQL Injection.
Every one of the 3 issues recorded for SERPed.net has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. SERPed.net is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-28998SERPed.net <= 4.6 - Unauthenticated Local File Inclusion
Read the full analysisVulnerability Records
SERPed.net
Author
serpednet
With this plugin you will be able to manage your sites, inner pages and internal links, set up analytics code, embed optin forms, display page metrics, and much more. In order to use this plugin, you will need to have an account with us. Don’t have an account? Why not check out our pricing plans and try us out. We offer a 30-day money back guarantee. FEATURES Add Post/Page as Inner Page – To add a post or page as an inner page in SERPed.net, simply click on ‘Add Post To SERPed’ or ‘Add Page to SERPed’ and fill out the short form. Site Metrics Widget – Create a widget to show your page’s metrics in your sidebar. Web Analytics – You can use the plugin to install your Web Analytics tracking code, without having to add it to every page you want to track. A huge time-saver! Site Auditor Pro – Create an optin form to offer a free website audit to your visitors, using Site Auditor Pro. Link Projects – Create a project to automatically generate internal links when specific words are used. Great for affiliate marketers! Keywords Statistics – View useful keyword statistics, for cool insights. Auto Updates – Automate WordPress, plugin and theme updates. For more info, check out our article: The New SERPed.net WordPress Plugin is Here! For product updates, tips and more, visit our blog… TECHNICAL DETAILS Please take note that the plugin calls Piwik’s API for website analytics. These APIs are used for the purpose of tracking the number of visitors to your sites, actions per visit, page viewers, total searches, downloads and outlinks. For more info, see: SERPed Privacy Policy SEPRed Terms of Service License This plugin is licensed under the GPLv2 (or later) license. See the GPLv2 license for more details.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C