Read the docs

seraphinitesoft

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

seraphinitesoft records in CISA KEV

No seraphinitesoft vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-83481 CVE-2026-90960 · GHSA-c769-pvxm-w832

Sensitive information exposure in Seraphinite Accelerator object cache

Priority LOW 30

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.29.24 via the WP_Object_Cache::_getFilePath.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00323 Published 2026-10-31 No fix listed CWE-200
TI-2026-14382 CVE-2026-17532 · GHSA-ff83-hfr5-72ch

Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scripting

Priority LOW 29

The Seraphinite Accelerator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'seraph_accel_prep' parameter in versions up to, and including, 2.29.15.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00794 Published 2026-08-05 No fix listed CWE-79
TI-2024-11276 CVE-2024-12160 · GHSA-2w64-fgrg-q98j

Seraphinite Bulk Discounts for WooCommerce <= 2.4.6 - Reflected Cross-Site Scripting

Priority LOW 27

The Seraphinite Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and inclu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00391 Published 2024-12-12 No fix listed CWE-79
TI-2026-02640 CVE-2026-3056 · GHSA-8hxc-9fg4-27rv

Seraphinite Accelerator <= 2.28.14 - Missing Authorization to Authenticated (Subscriber+) Log Clearing

Priority LOW 20

The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `seraph_accel_api` AJAX action with `fn=LogClear` in all versions up to, and in…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00276 Published 2026-03-04 No fix listed CWE-862
Open these records in search →