Read the docs

SolidWP

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

SolidWP records in CISA KEV

No SolidWP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Solid Security 2 records LOW

Records

4 records

TI-2025-00954 CVE-2025-1123 · GHSA-3c52-m5xj-c7ff

Solid Mail – SMTP email and logging made by SolidWP <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting via Email

Priority LOW 38

The Solid Mail – SMTP email and logging made by SolidWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email Name, Subject, and Body in all versions up to, and including, 2.1.5 due to insufficient…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00381 Published 2025-05-23 No fix listed CWE-79
TI-2023-13296 CVE-2023-28786 · GHSA-7c75-vj46-9946

WordPress Solid Security Plugin <= 8.1.4 is vulnerable to Open Redirection

Priority LOW 27

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SolidWP Solid Security – Password, Two Factor Authentication, and Brute Force Protection.This issue affects Solid Security – Password, Two Factor Authe…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-12-29 No fix listed CWE-601
TI-2023-20893 CVE-2023-40001 · GHSA-mv8m-8gw4-6jh3

WordPress iThemes Sync plugin <= 2.1.13 - Broken Access Control vulnerability

Priority LOW 21

Missing Authorization vulnerability in SolidWP iThemes Sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects iThemes Sync: from n/a through 2.1.13.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00489 Published 2024-12-13 No fix listed CWE-862
Open these records in search →