Seraphinite Accelerator — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Seraphinite Accelerator, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-87828	Seraphinite Accelerator < 2.29.24 - Subscriber+ DoS via seraph_accel_State Update	-	-	2026-09-16
CVE-2026-17532	Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scripting CWE-79	6.1	Medium	2026-08-05
CVE-2026-3056	Seraphinite Accelerator <= 2.28.14 - Missing Authorization to Authenticated (Subscriber+) Log Clearing CWE-862	4.3	Medium	2026-03-04
CVE-2026-3058	Seraphinite Accelerator <= 2.28.14 - Authenticated (Subscriber+) Exposure of Sensitive Information to an Unauthorized Actor CWE-200	4.3	Medium	2026-03-04
CVE-2024-54222	WordPress Seraphinite Accelerator plugin <= 2.22.15 - Authenticated Sensitive Data Exposure vulnerability CWE-862	4.3	Medium	2026-02-20
CVE-2025-6059	Seraphinite Accelerator <= 2.27.21 - Cross-Site Request Forgery to Multiple Administrative Actions CWE-352	4.3	Medium	2025-06-14
CVE-2024-22138	WordPress Seraphinite Accelerator plugin <= 2.20.47 - Sensitive Data Exposure via Log File vulnerability CWE-532	5.3	Medium	2024-03-28
CVE-2024-1568	Seraphinite Accelerator <= 2.20.52 - Authenticated (Subscriber+) Server-Side Request Forgery in OnAdminApi_HtmlCheck CWE-918	6.4	Medium	2024-02-28
CVE-2023-49740	WordPress Seraphinite Accelerator Plugin <= 2.20.28 is vulnerable to Cross Site Scripting (XSS) CWE-79	7.1	High	2023-12-14
CVE-2023-5611	Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import	5.3	-	2023-11-27
CVE-2023-5610	Seraphinite Accelerator < 2.20.29 - Authenticated Arbitrary Redirect	6.1^AI	Medium ^AI	2023-11-20
CVE-2023-5609	Seraphinite Accelerator < 2.20.29 - Reflected XSS	6.1^AI	Medium ^AI	2023-11-20

All 12 known CVE vulnerabilities affecting Seraphinite Accelerator with full Chinese analysis, references, and POCs where available.