Browse CVEs

MEDIUM 6.5 CVE-2026-3058 The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via th… Seraphinite Accelerator 2.28.15+ Fix from $1,6002026-03-04 MEDIUM 6.4 CVE-2024-38728 Server-Side Request Forgery (SSRF) vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source.This issue affects Seraphinite Post .DOCX Sou… Seraphinite Post .docx Source 2.16.10+ Fix from $1,6002024-07-22 MEDIUM 6.4 CVE-2024-1568 The Seraphinite Accelerator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.20.52 via the O… Seraphinite Accelerator after 2.20.52 Fix from $1,6002024-02-28 MEDIUM 6.1 CVE-2023-49740 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Seraphinite Solutions Seraphinite Accelerator a… Seraphinite Accelerator 2.20.29+ Fix from $1,6002023-12-14 HIGH 8.8 CVE-2023-48279 Cross-Site Request Forgery (CSRF) vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue a… Seraphinite Post .docx Source after 2.16.6 Fix from $1,9502023-11-30 MEDIUM 5.3 CVE-2023-5611 The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, al… Seraphinite Accelerator 2.20.32+ Fix from $1,6002023-11-27 MEDIUM 6.1 CVE-2023-5609 The Seraphinite Accelerator WordPress plugin before 2.2.29 does not sanitise and escape a parameter before outputting it back in the page, leading to… Seraphinite Accelerator 2.2.29+ Fix from $1,6002023-11-20 MEDIUM 5.4 CVE-2023-5610 The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user to, leading to an arbitrary r… Seraphinite Accelerator 2.2.29+ Fix from $1,6002023-11-20