Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: SolidWP Clear all filters
TI-2025-00954 CVE-2025-1123 · GHSA-3c52-m5xj-c7ff

Solid Mail – SMTP email and logging made by SolidWP <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting via Email

Priority LOW 38

The Solid Mail – SMTP email and logging made by SolidWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email Name, Subject, and Body in all versions up to, and including, 2.1.5 due to insufficient…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00381 Published 2025-05-23 No fix listed CWE-79
TI-2023-20893 CVE-2023-40001 · GHSA-mv8m-8gw4-6jh3

WordPress iThemes Sync plugin <= 2.1.13 - Broken Access Control vulnerability

Priority LOW 21

Missing Authorization vulnerability in SolidWP iThemes Sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects iThemes Sync: from n/a through 2.1.13.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00489 Published 2024-12-13 No fix listed CWE-862
TI-2023-13296 CVE-2023-28786 · GHSA-7c75-vj46-9946

WordPress Solid Security Plugin <= 8.1.4 is vulnerable to Open Redirection

Priority LOW 27

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SolidWP Solid Security – Password, Two Factor Authentication, and Brute Force Protection.This issue affects Solid Security – Password, Two Factor Authe…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-12-29 No fix listed CWE-601