Not rated
CVE-2023-5610 The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated…
Description
The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user to, leading to an arbitrary redirect
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Seraphinite Accelerator 2.2 | earliest → < 2.2.29 | 2.2.29 |
Other CVEs of Seraphinite Accelerator
The 4 CVEs of Seraphinite Accelerator →
CVE-2026-87828
The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its…
5.7
Medium
CVE-2023-5611
The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting…
Not rated
CVE-2023-5609
The Seraphinite Accelerator WordPress plugin before 2.2.29 does not sanitise and escape a parameter before outputting it…
Not rated