WordPress plugin
Seraphinite Accelerator security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 13 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium13
- Low0
All Seraphinite Accelerator vulnerabilities
- Medium5.3Unauthenticated Sensitive Information Exposure in Object Cache Directory
≤2.29.24Update to 2.29.25
- Medium4.3Authenticated (Subscriber+) Full Admin Area Denial of Service
≤2.29.23Update to 2.29.24
- Medium6.1Reflected Cross-Site Scripting
≤2.29.18Update to 2.29.19
- Medium4.3Authenticated (Subscriber+) Exposure of Sensitive Information to an Unauthorized Actor
≤2.28.14Update to 2.28.15
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Log Clearing
≤2.28.14Update to 2.28.15
- Medium4.3Cross-Site Request Forgery to Multiple Administrative Actions
≤2.27.21Update to 2.27.22
- Medium4.3Authenticated (Subscriber+) Information Exposure
≤2.22.15Update to 2.22.16
- Medium6.4Authenticated (Subscriber+) Server-Side Request Forgery in OnAdminApi_HtmlCheck
≤2.20.52Update to 2.21
- Medium5.3Unauthenticated Sensitive Information Exposure via Log File
≤2.20.47Update to 2.20.48
- Medium6.1Reflected Cross-Site Scripting via rt
≤2.20.28Update to 2.20.29
- Medium4.3Cross-Site Request Forgery
≤2.20.31Update to 2.20.32
- Medium6.1Reflected Cross-Site Scripting via 'rt'
≤2.20.28Update to 2.20.29
- Medium5.4Arbitrary Redirect via 'redir'
≤2.20.28Update to 2.20.29
Seraphinite Accelerator: common questions
Does Seraphinite Accelerator have known vulnerabilities?
Yes. VulnCrest Radar lists 13 known vulnerabilities in Seraphinite Accelerator: 13 medium. None are known to affect version null.
How do I check which version of Seraphinite Accelerator I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Seraphinite Accelerator vulnerability?
CVE-2026-90960, published Oct 30, 2026: Seraphinite Accelerator <= 2.29.24 - Unauthenticated Sensitive Information Exposure in Object Cache Directory. Severity: Medium (CVSS 5.3).
Is any Seraphinite Accelerator vulnerability listed in CISA KEV?
No. None of the known Seraphinite Accelerator vulnerabilities is currently listed in the CISA KEV catalog.