Packagist nystudio107/craft-seomatic

Name: Packagist nystudio107/craft-seomatic
Brand: Packagist

productUS

pkg:composer/nystudio107/craft-seomatic

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

3critical2high1medium0low

updated 2026-10-28

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-14716US	high7.5	32.7% (98th)	Exploit	3.1.4	2018-08-06	< 3.1.4
CVE-2020-9757US	critical9.8	72.8% (99th)	—	3.3.0	2020-03-04	< 3.3.0
CVE-2021-41749US	critical9.8	16.8% (97th)	—	3.4.11	2022-06-12	< 3.4.11
CVE-2020-12790US	high7.5	2.19% (82nd)	—	3.2.49	2020-05-11	< 3.2.49
CVE-2021-44618US	critical9.8	1.40% (72nd)	—	3.4.12	2022-03-11	< 3.4.12
CVE-2021-41750US	medium6.1	1.11% (66th)	—	3.4.11	2022-06-12	< 3.4.11

The flaw types (CWEs) most of these CVEs share.

CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.