CVE-2026-90960

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.29.24 via the WPObjectCache::getFilePath. This makes it possible for unauthenticated attackers to extract complete WordPress user records — including plaintext...

CVE-2026-90960 Seraphinite Accelerator <= 2.29.24 - Unauthenticated Sensitive Information Exposure in Object Cache Directory

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.29.24 via the WPObjectCache::getFilePath. This makes it possible for unauthenticated attackers to extract complete WordPress user records — including plaintext...

CVE-2026-90960

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 2.29.24 . The flaw exists within the WP_Object_Cache::_getFilePath function and allows unauthenticated attackers to extract complete WordPress user records, includi...

EUVD-2026-114604

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.29.24 via the WPObjectCache::getFilePath. This makes it possible for unauthenticated attackers to extract complete WordPress user records — including plaintext...

CVE-2026-90960: seraphinitesoft Seraphinite Accelerator: The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,…

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.29.24 via the WPObjectCache::getFilePath. This makes it possible for unauthenticated attackers to extract complete WordPress user records — including plaintext...