Smart Agreements

Smart Agreements has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is PHP Remote File Inclusion, behind 1 of the records (100%).

The one issue recorded for Smart Agreements has a vendor fix available, so running the current release closes it.

All of these findings were reported by Dimas Maulana. Smart Agreements is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSCritical
9.8/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Smart Agreements vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-39462

Smart Agreements <= 1.0.3 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

1 records
Smart Agreements banner
Latestv1.0.4

Smart Agreements

teamzt

Author

teamzt

0.0(0)
0/100
Last Updated
2026-02-05 (7mo ago)
Active Installs
20+
Downloads
2,992
Requires WP
5.5+
Requires PHP
7.2+
Tested up to
WP 6.9.7
Created
2023-10-31 (3y ago)

This Contract Form is for a Service Agreement between the Client and the Provider. The Client agrees to engage the Provider to provide services as described in the Contract Form. The Provider agrees to provide these services in accordance with the terms and conditions set forth in the Contract Form. The Provider will provide all necessary resources, materials, and personnel to accomplish each task outlined in the Contract Form. The Client agrees to pay the Provider the total amount stated in the Contract Form for all services provided. The Client also agrees to be responsible for all taxes, fees, and other charges related to the services. The Client agrees to provide the Provider with reasonable access to the premises necessary for the performance of the services. The Client also agrees to provide reasonable notice of any changes in the requirements or scope of the services. Main Features Easy to use: The Contract Form plugin is designed to be easy to use and intuitive so that even the most inexperienced users can quickly create professional contracts. Customizable: The Contract Form plugin allows users to customize their contracts with their own logo, branding, and text. Automated: The Contract Form plugin automates the entire contract creation process, from generating the initial draft to managing the signatures of all involved parties. Secure: The Contract Form plugin is built to ensure that all contracts remain secure and confidential by encrypting data sent to and from the server. Multi-language: The Contract Form plugin is multi-language, allowing users to create contracts in any language they need. Integration: The Contract Form plugin can be easily integrated with other applications and services, including accounting and payment processing software. Installing via FTP Login to your hosting space via an FTP software, e.g. FileZilla. Unzip the downloaded smart agreements plugin by WordPress plugin folder without making any changes to the folder. Upload the smart agreements plugin by WordPress plugin into the following location wp-content>plugins. Login to the WordPress Administrator Panel. Activate smart agreements plugin by going to Plugins and press Activate button.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C