Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Seraphinite Accelerator 2.2.29 Clear all filters
TI-2023-05163 CVE-2023-5610 · GHSA-hx6v-27f6-jgp7

Seraphinite Accelerator < 2.20.29 - Authenticated Arbitrary Redirect

Priority LOW 25

The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user to, leading to an arbitrary redirect

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00432 Published 2023-11-20 Fixed in 2.2.29 CWE-601
TI-2023-05162 CVE-2023-5609 · GHSA-4rfx-692g-gc7w

Seraphinite Accelerator < 2.20.29 - Reflected XSS

Priority LOW 28

The Seraphinite Accelerator WordPress plugin before 2.2.29 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high priv…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00514 Published 2023-11-20 Fixed in 2.2.29 CWE-79