Read the docs

Seraphinite Solutions

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Seraphinite Solutions records in CISA KEV

No Seraphinite Solutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Seraphinite Accelerator 6 records LOW Seraphinite Post .docx Source 2 records LOW

Records

6 records in Seraphinite Accelerator · all components

TI-2023-27150 CVE-2023-49740 · GHSA-v9r2-xx4h-x954

WordPress Seraphinite Accelerator Plugin <= 2.20.28 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Seraphinite Solutions Seraphinite Accelerator allows Reflected XSS.This issue affects Seraphinite Accelerator: from n/…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-12-14 No fix listed CWE-79
TI-2026-02642 CVE-2026-3058 · GHSA-j4v5-x6jp-h7cf

Information disclosure in seraphinitesoft Seraphinite Accelerator

Priority LOW 29

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the `seraph_accel_api` AJAX action with `fn=GetData`.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00348 Published 2026-03-04 No fix listed CWE-200
TI-2023-05162 CVE-2023-5609 · GHSA-4rfx-692g-gc7w

Seraphinite Accelerator < 2.20.29 - Reflected XSS

Priority LOW 28

The Seraphinite Accelerator WordPress plugin before 2.2.29 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high priv…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00514 Published 2023-11-20 Fixed in 2.2.29 CWE-79
TI-2023-05163 CVE-2023-5610 · GHSA-hx6v-27f6-jgp7

Seraphinite Accelerator < 2.20.29 - Authenticated Arbitrary Redirect

Priority LOW 25

The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user to, leading to an arbitrary redirect

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00432 Published 2023-11-20 Fixed in 2.2.29 CWE-601
TI-2023-05164 CVE-2023-5611 · GHSA-8993-7526-7h8g

Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import

Priority LOW 24

The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00268 Published 2023-11-27 Fixed in 2.20.32 CWE-862
Open these records in search →