Seraphinite Solutions
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Seraphinite Accelerator | 3 | – | Feb 20, 2026 |
| Seraphinite Post .DOCX Source | 3 | – | Nov 1, 2024 |
| Seraphinite Accelerator (Full, premium) | 1 | – | Jul 12, 2024 |
Exploited and recent CVEs
- CVE-2024-54222 WordPress Seraphinite Accelerator plugin <= 2.22.15 - Authenticated Sensitive Data Exposure vulnerability 0.3%
- CVE-2024-38727 WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Broken Access Control vulnerability 0.4%
- CVE-2024-38728 WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Server Side Request Forgery (SSRF) vulnerability 0.3%
- CVE-2024-37940 WordPress Seraphinite Accelerator (Full, premium) plugin <= 2.21.13 - CSRF Leading to Arbitrary File Deletion vulnerability 0.2%
- CVE-2024-22138 WordPress Seraphinite Accelerator plugin <= 2.20.47 - Sensitive Data Exposure via Log File vulnerability 0.4%
- CVE-2023-49740 WordPress Seraphinite Accelerator Plugin <= 2.20.28 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-48279 WordPress Seraphinite Post .DOCX Source Plugin <= 2.16.6 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%