CVE-2025-39473: Webgeniuslab Seofy Core

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebGeniusLab Seofy Core seofy-core allows PHP Local File Inclusion.This issue affects Seofy Core: from n/a through <= 1.6.8.

Affected products

• Webgeniuslab Seofy Core: up to and including 1.6.8

Published 2025-06-09. Last modified 2026-06-17.