Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: seraphinitesoft Clear all filters
TI-2026-83481 CVE-2026-90960 · GHSA-c769-pvxm-w832

Sensitive information exposure in Seraphinite Accelerator object cache

Priority LOW 30

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.29.24 via the WP_Object_Cache::_getFilePath.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00323 Published 2026-10-31 No fix listed CWE-200
TI-2026-14382 CVE-2026-17532 · GHSA-ff83-hfr5-72ch

Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scripting

Priority LOW 29

The Seraphinite Accelerator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'seraph_accel_prep' parameter in versions up to, and including, 2.29.15.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00794 Published 2026-08-05 No fix listed CWE-79
TI-2026-02640 CVE-2026-3056 · GHSA-8hxc-9fg4-27rv

Seraphinite Accelerator <= 2.28.14 - Missing Authorization to Authenticated (Subscriber+) Log Clearing

Priority LOW 20

The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `seraph_accel_api` AJAX action with `fn=LogClear` in all versions up to, and in…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00276 Published 2026-03-04 No fix listed CWE-862
TI-2024-11276 CVE-2024-12160 · GHSA-2w64-fgrg-q98j

Seraphinite Bulk Discounts for WooCommerce <= 2.4.6 - Reflected Cross-Site Scripting

Priority LOW 27

The Seraphinite Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and inclu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00391 Published 2024-12-12 No fix listed CWE-79