What’s Vulnerable › Products

seraphinitesoft Seraphinite Accelerator vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your seraphinitesoft Seraphinite Accelerator version is affected

Latest seraphinitesoft Seraphinite Accelerator vulnerabilities

• CVE-2026-90960 — Seraphinite Accelerator <= 2.29.24 - Unauthenticated Sensitive Information Exposure in Object Cache Directory (CVSS 5.3)
• CVE-2026-87828 — Seraphinite Accelerator < 2.29.24 - Subscriber+ DoS via seraph_accel_State Update (CVSS 5.7)
• CVE-2026-17532 — Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2026-3058 — Seraphinite Accelerator <= 2.28.14 - Authenticated (Subscriber+) Exposure of Sensitive Information to an Unauthorized Actor (CVSS 6.5)
• CVE-2026-3056 — Seraphinite Accelerator <= 2.28.14 - Missing Authorization to Authenticated (Subscriber+) Log Clearing (CVSS 4.3)
• CVE-2024-54222 — WordPress Seraphinite Accelerator plugin <= 2.22.15 - Authenticated Sensitive Data Exposure vulnerability (CVSS 4.3)
• CVE-2025-6059 — Seraphinite Accelerator <= 2.27.21 - Cross-Site Request Forgery to Multiple Administrative Actions (CVSS 4.3)
• CVE-2024-1568 — Seraphinite Accelerator <= 2.20.52 - Authenticated (Subscriber+) Server-Side Request Forgery in OnAdminApi_HtmlCheck (CVSS 6.4)
• CVE-2023-49740 — WordPress Seraphinite Accelerator Plugin <= 2.20.28 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
• CVE-2023-5611 — Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import (CVSS 5.3)
• CVE-2023-5610 — Seraphinite Accelerator < 2.20.29 - Authenticated Arbitrary Redirect (CVSS 5.4)
• CVE-2023-5609 — Seraphinite Accelerator < 2.20.29 - Reflected XSS (CVSS 6.1)