Vulnerabilities

TI-2026-02642 CVE-2026-3058 · GHSA-j4v5-x6jp-h7cf

Information disclosure in seraphinitesoft Seraphinite Accelerator

LOW 29

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the `seraph_accel_api` AJAX action with `fn=GetData`.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00348 Published 2026-03-04 No fix listed CWE-200

TI-2024-36311 CVE-2024-54222 · GHSA-c88w-mqr9-prrr

WordPress Seraphinite Accelerator plugin <= 2.22.15 - Authenticated Sensitive Data Exposure vulnerability

LOW 20

Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Accelerator seraphinite-accelerator allows Retrieve Embedded Sensitive Data.This issue affects Seraphinite Accelerator: from n/a through <= 2.22.15…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00317 Published 2026-02-20 No fix listed CWE-862

TI-2024-25961 CVE-2024-38727 · GHSA-gg6x-vxmp-7wc5

WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seraphinite Post .DOCX Source: from n/…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00372 Published 2024-11-01 No fix listed CWE-862

TI-2024-25962 CVE-2024-38728 · GHSA-2hxf-jmpm-jxjc

WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Server Side Request Forgery (SSRF) vulnerability

LOW 37

Server-Side Request Forgery (SSRF) vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9.

CVSS 3.1HIGH 7.1 Network No auth No interaction EPSS 0.00271 Published 2024-07-22 No fix listed CWE-918

TI-2024-25246 CVE-2024-37940 · GHSA-rj6w-phgg-rmx6

Cross-site request forgery in Seraphinite Accelerator

LOW 32

Cross-Site Request Forgery (CSRF) vulnerability in Seraphinite Solutions Seraphinite Accelerator (Full, premium).This issue affects Seraphinite Accelerator (Full, premium): from n/a through 2.21.13.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00228 Published 2024-07-12 No fix listed CWE-352

TI-2024-14739 CVE-2024-22138 · GHSA-556m-hx4g-v68m

WordPress Seraphinite Accelerator plugin <= 2.20.47 - Sensitive Data Exposure via Log File vulnerability

LOW 30

Insertion of Sensitive Information into Log File vulnerability in Seraphinite Solutions Seraphinite Accelerator.This issue affects Seraphinite Accelerator: from n/a through 2.20.47.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00443 Published 2024-03-28 No fix listed CWE-532

TI-2024-01464 CVE-2024-1568 · GHSA-9g2q-6jw7-cqfm

Seraphinite Accelerator <= 2.20.52 - Authenticated (Subscriber+) Server-Side Request Forgery in OnAdminApi_HtmlCheck

LOW 28

The Seraphinite Accelerator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.20.52 via the OnAdminApi_HtmlCheck function.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00335 Published 2024-02-28 No fix listed CWE-918

TI-2023-27150 CVE-2023-49740 · GHSA-v9r2-xx4h-x954

WordPress Seraphinite Accelerator Plugin <= 2.20.28 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Seraphinite Solutions Seraphinite Accelerator allows Reflected XSS.This issue affects Seraphinite Accelerator: from n/…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-12-14 No fix listed CWE-79

TI-2023-26142 CVE-2023-48279 · GHSA-9h6r-86jg-54x9

WordPress Seraphinite Post .DOCX Source Plugin <= 2.16.6 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-11-30 No fix listed CWE-352

TI-2023-05164 CVE-2023-5611 · GHSA-8993-7526-7h8g

Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import

LOW 24

The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00268 Published 2023-11-27 Fixed in 2.20.32 CWE-862

TI-2023-05163 CVE-2023-5610 · GHSA-hx6v-27f6-jgp7

Seraphinite Accelerator < 2.20.29 - Authenticated Arbitrary Redirect

LOW 25

The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user to, leading to an arbitrary redirect

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00432 Published 2023-11-20 Fixed in 2.2.29 CWE-601

TI-2023-05162 CVE-2023-5609 · GHSA-4rfx-692g-gc7w

Seraphinite Accelerator < 2.20.29 - Reflected XSS

LOW 28

The Seraphinite Accelerator WordPress plugin before 2.2.29 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high priv…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00514 Published 2023-11-20 Fixed in 2.2.29 CWE-79

Vulnerabilities

Filters