Read the docs

Seraphinite Solutions

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Seraphinite Solutions records in CISA KEV

No Seraphinite Solutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Seraphinite Accelerator 6 records LOW Seraphinite Post .docx Source 2 records LOW

Records

12 records

TI-2023-26142 CVE-2023-48279 · GHSA-9h6r-86jg-54x9

WordPress Seraphinite Post .DOCX Source Plugin <= 2.16.6 is vulnerable to Cross Site Request Forgery (CSRF)

Priority LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-11-30 No fix listed CWE-352
TI-2024-25246 CVE-2024-37940 · GHSA-rj6w-phgg-rmx6

Cross-site request forgery in Seraphinite Accelerator

Priority LOW 32

Cross-Site Request Forgery (CSRF) vulnerability in Seraphinite Solutions Seraphinite Accelerator (Full, premium).This issue affects Seraphinite Accelerator (Full, premium): from n/a through 2.21.13.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00228 Published 2024-07-12 No fix listed CWE-352
TI-2023-27150 CVE-2023-49740 · GHSA-v9r2-xx4h-x954

WordPress Seraphinite Accelerator Plugin <= 2.20.28 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Seraphinite Solutions Seraphinite Accelerator allows Reflected XSS.This issue affects Seraphinite Accelerator: from n/…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-12-14 No fix listed CWE-79
TI-2026-02642 CVE-2026-3058 · GHSA-j4v5-x6jp-h7cf

Information disclosure in seraphinitesoft Seraphinite Accelerator

Priority LOW 29

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the `seraph_accel_api` AJAX action with `fn=GetData`.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00348 Published 2026-03-04 No fix listed CWE-200
TI-2023-05162 CVE-2023-5609 · GHSA-4rfx-692g-gc7w

Seraphinite Accelerator < 2.20.29 - Reflected XSS

Priority LOW 28

The Seraphinite Accelerator WordPress plugin before 2.2.29 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high priv…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00514 Published 2023-11-20 Fixed in 2.2.29 CWE-79
TI-2023-05163 CVE-2023-5610 · GHSA-hx6v-27f6-jgp7

Seraphinite Accelerator < 2.20.29 - Authenticated Arbitrary Redirect

Priority LOW 25

The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user to, leading to an arbitrary redirect

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00432 Published 2023-11-20 Fixed in 2.2.29 CWE-601
TI-2023-05164 CVE-2023-5611 · GHSA-8993-7526-7h8g

Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import

Priority LOW 24

The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00268 Published 2023-11-27 Fixed in 2.20.32 CWE-862
TI-2024-36311 CVE-2024-54222 · GHSA-c88w-mqr9-prrr

WordPress Seraphinite Accelerator plugin <= 2.22.15 - Authenticated Sensitive Data Exposure vulnerability

Priority LOW 20

Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Accelerator seraphinite-accelerator allows Retrieve Embedded Sensitive Data.This issue affects Seraphinite Accelerator: from n/a through <= 2.22.15…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00317 Published 2026-02-20 No fix listed CWE-862
TI-2024-25961 CVE-2024-38727 · GHSA-gg6x-vxmp-7wc5

WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seraphinite Post .DOCX Source: from n/…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00372 Published 2024-11-01 No fix listed CWE-862
Open these records in search →