SMM API

SMM API has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

None of the 2 issues recorded for SMM API have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, one record each. SMM API is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.7.

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage0%
Open

2

Fixed

0

Get automatic notifications for all SMM API vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2025-31855

SMM API <= 6.0.30 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
SMM API banner
Latestv6.0.31
4.3(12)
86/100
Last Updated
2026-01-05 (8mo ago)
Active Installs
60+
Downloads
24,056
Requires WP
4.9.9+
Requires PHP
0+
Tested up to
WP 6.6.7
Created
2015-11-12 (11y ago)

This plugin automates the client order processing and Order placing at SMM server. Customer gets an onetime response back for each SMM item that is bought through panel websites. Many SMM servers do not give free plugin for WordPress Sites. Hence I thought to write simple plugin that does online active integration with supporting server sites. It needs a api server url and api key to pull data from server and place order with server from any Re-seller panel WordPress site. The order is displayed in admin page and it will be a List view in admin page. Users can put their own price tag and route orders to server sites with added options available with this plugin. Try free version and learn to use the plugin before you want any advanced features. If you need technical support please mail me at sam@softnwords.com and you get reply in couple of days as there are many emails in mailbox. Some Core Features: This plugin uses WordPress Built-in Libraries. So it runs so fast with any hosting provider. It can be set-up very quick with no technical background. It uses database to store only active orders. Notice This plugin framework is fork from yith WooCommerce subscription and the use and features are substantially differs. All credits to original author for the beautiful framework. Arbitrary section Order list View: Change Order scheme Editing API Items Editing API Server Items Import SMM Items from Server. External services This plugin connects to an API to obtain demo content, it’s needed to show the API server information and output content in the wp list table at the admin panel window. It sends the user’s api key every time the demo is loaded and recives the server contents to fill the wp list table. This service is provided by “seoclerks.in”: terms of use, privacy policy. This Plugin connects to softnwords.com for user guide data and terms of use, privacy policy.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C