Seraphinite Accelerator (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-16. Vendor: Unknown.

CVEs of Seraphinite Accelerator

• CVE-2026-87828 - CVSS 5.7 (medium), 2026-09-16: The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing…
• CVE-2023-5611 - CVSS 5.3 (medium), 2023-11-27: The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing…
• CVE-2023-5610 - CVSS 5.4 (medium), 2023-11-20: The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user to, leading to an arbitrary redirect
• CVE-2023-5609 - CVSS 6.1 (medium), 2023-11-20: The Seraphinite Accelerator WordPress plugin before 2.2.29 does not sanitise and escape a parameter before outputting it back in the page, leading to a…