Seraphinitesoft Seraphinite Accelerator
5 CVEs affecting Seraphinitesoft Seraphinite Accelerator. Latest disclosed: 2026-08-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-1568 | Medium | 6.4 | 2024-02-28 | The Seraphinite Accelerator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.20.52 via the OnAdminApi_… |
CVE-2026-17532 | Medium | 6.1 | 2026-08-05 | The Seraphinite Accelerator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'seraph_accel_prep' parameter in versions up to, and i… |
CVE-2026-3058 | Medium | 4.3 | 2026-03-04 | The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the `seraph_… |
CVE-2026-3056 | Medium | 4.3 | 2026-03-04 | The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `seraph_accel_api`… |
CVE-2025-6059 | Medium | 4.3 | 2025-06-14 | The Seraphinite Accelerator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.27.21. This is due to miss… |