Lucene search
+L

1084 matches found

Cvelist
Cvelist
•added 2026/03/04 11:22 a.m.•56 views

CVE-2026-3058 Seraphinite Accelerator <= 2.28.14 - Authenticated (Subscriber+) Exposure of Sensitive Information to an Unauthorized Actor

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the seraphaccelapi AJAX action with fn=GetData. This is due to the OnAdminApiGetData function not performing any capability checks. This makes it...

4.3CVSS0.0043EPSS
SaveExploits0References4
CVE
CVE
•added 2026/03/04 11:22 a.m.•44 views

CVE-2026-3056

CVE-2026-3056 affects the Seraphinite Accelerator WordPress plugin (all versions up to 2.28.14). Root cause: missing capability check on the seraph_accel_api AJAX action with fn=LogClear, allowing authenticated users with Subscriber-level access or higher to clear the plugin’s debug/operational l...

4.3CVSS5.8AI score0.00349EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/03/04 11:22 a.m.•52 views

CVE-2026-3056 Seraphinite Accelerator <= 2.28.14 - Missing Authorization to Authenticated (Subscriber+) Log Clearing

The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the seraphaccelapi AJAX action with fn=LogClear in all versions up to, and including, 2.28.14. This makes it possible for authenticated attackers, with...

4.3CVSS0.00349EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/03/04 11:22 a.m.•11 views

CVE-2026-3056

The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the seraphaccelapi AJAX action with fn=LogClear in all versions up to, and including, 2.28.14. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00349EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/03/04 11:22 a.m.•9 views

CVE-2026-3056 Seraphinite Accelerator <= 2.28.14 - Missing Authorization to Authenticated (Subscriber+) Log Clearing

The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the seraphaccelapi AJAX action with fn=LogClear in all versions up to, and including, 2.28.14. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00349EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/04 12:00 a.m.•7 views

CVE-2026-3056: Missing Authorization

The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the seraphaccelapi AJAX action with fn=LogClear in all versions up to, and including, 2.28.14. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00349EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/04 12:00 a.m.•17 views

WordPress plugin Seraphinite Accelerator 信息泄露漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.8AI score0.0043EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/03/04 12:00 a.m.•35 views

WordPress plugin Seraphinite Accelerator 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

4.3CVSS5.8AI score0.00349EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/03/04 12:00 a.m.•31 views

PT-2026-22901

The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the seraph accel api AJAX action with fn=LogClear in all versions up to, and including, 2.28.14. This makes it possible for authenticated attackers, with...

4.3CVSS5.9AI score0.00349EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/04 12:00 a.m.•3 views

CVE-2026-3058: Exposure of Sensitive Information to an Unauthorized Actor

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the seraphaccelapi AJAX action with fn=GetData. This is due to the OnAdminApiGetData function not performing any capability checks. This makes it...

6.5CVSS5.8AI score0.0043EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/23 12:00 a.m.•18 views

PT-2026-30038

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The Linux kernel contains a flaw within the accel/amdxdna component. The issue involves insufficient validation of the command buffer payload count. Specifically, the count field in the...

7.7CVSS7.1AI score0.00118EPSS
SaveExploits0References19
RedhatCVE
RedhatCVE
•added 2026/02/21 7:29 p.m.•21 views

CVE-2024-54222

Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Accelerator seraphinite-accelerator allows Retrieve Embedded Sensitive Data.This issue affects Seraphinite Accelerator: from n/a through = 2.22.15...

4.3CVSS5.5AI score0.0029EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/20 4:22 p.m.•23 views

CVE-2024-54222

Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Accelerator seraphinite-accelerator allows Retrieve Embedded Sensitive Data.This issue affects Seraphinite Accelerator: from n/a through = 2.22.15...

4.3CVSS0.0029EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/20 3:46 p.m.•37 views

CVE-2024-54222 WordPress Seraphinite Accelerator plugin <= 2.22.15 - Authenticated Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Accelerator seraphinite-accelerator allows Retrieve Embedded Sensitive Data.This issue affects Seraphinite Accelerator: from n/a through = 2.22.15...

4.3CVSS0.0029EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/20 3:46 p.m.•14 views

CVE-2024-54222 WordPress Seraphinite Accelerator plugin <= 2.22.15 - Authenticated Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Accelerator seraphinite-accelerator allows Retrieve Embedded Sensitive Data.This issue affects Seraphinite Accelerator: from n/a through = 2.22.15...

4.3CVSS8.1AI score0.0029EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/20 3:46 p.m.•28 views

CVE-2024-54222

CVE-2024-54222 affects the WordPress Seraphinite Accelerator plugin (seraphinite-accelerator) with versions up to 2.22.15. The Red Hat and NVD entries confirm a Missing Authorization vulnerability that permits retrieval of embedded sensitive data from the Seraphinite Accelerator component. The ri...

4.3CVSS8.1AI score0.0029EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/20 12:00 a.m.•22 views

WordPress plugin Seraphinite Accelerator 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

4.3CVSS7.3AI score0.0029EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/20 12:00 a.m.•26 views

PT-2026-21031

Name of the Vulnerable Software and Affected Versions Seraphinite Solutions Seraphinite Accelerator versions through 2.22.15 Description A missing authorization issue exists in Seraphinite Accelerator, potentially allowing retrieval of embedded sensitive data. The issue affects the...

8.5AI score0.0029EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•14 views

CVE-2024-54222: Missing Authorization

Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Accelerator seraphinite-accelerator allows Retrieve Embedded Sensitive Data.This issue affects Seraphinite Accelerator: from n/a through = 2.22.15...

4.3CVSS5.8AI score0.0029EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2026/02/14 12:00 a.m.•14 views

A Real-Time Approach to Autonomous CAN Bus Reverse Engineering

This paper introduces a real-time method for reverse engineering a vehicle's CAN bus without prior knowledge of the vehicle or its CAN system. By comparing inertial measurement and CAN data during significant vehicle events, the method accurately identified the CAN channels associated with the...

5.7AI score
SaveExploits0
Rows per page
Query Builder