What’s Vulnerable › Vulnerabilities

CVE-2023-5610: Seraphinite Accelerator < 2.20.29 - Authenticated Arbitrary Redirect

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-11-20 · updated 2026-06-17
• Weakness: CWE-601

Description

The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user to, leading to an arbitrary redirect

Affected products

• seraphinitesoft Seraphinite Accelerator: before 2.2.29 — fixed in 2.2.29

How to fix

Upgrade to a fixed version: seraphinitesoft Seraphinite Accelerator 2.2.29. Check the vendor advisory for mitigations.

References

• https://wpscan.com/vulnerability/e880a9fb-b089-4f98-9781-7d946f22777e
• https://wpscan.com/vulnerability/e880a9fb-b089-4f98-9781-7d946f22777e

Get alerted when CVE-2023-5610 or the next vulnerability affects your stack