SolidWP
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| iThemes Sync | 1 | – | Dec 13, 2024 |
| Solid Mail – SMTP email and logging made by SolidWP | 1 | – | May 23, 2025 |
| Solid Security | 1 | – | Jun 21, 2024 |
| Solid Security – Password, Two Factor Authentication, and Brute Force Protection | 1 | – | Dec 29, 2023 |
Exploited and recent CVEs
- CVE-2025-1123 Solid Mail – SMTP email and logging made by SolidWP <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting via Email 0.4%
- CVE-2023-40001 WordPress iThemes Sync plugin <= 2.1.13 - Broken Access Control vulnerability 0.5%
- CVE-2022-44593 WordPress Solid Security plugin <= 9.3.1 - IP Spoofing Leading to Denial of Service vulnerability 0.3%
- CVE-2023-28786 WordPress Solid Security Plugin <= 8.1.4 is vulnerable to Open Redirection 0.4%