PT-2026-21031 · Seraphinite Solutions · Seraphinite Accelerator

Dave Jong · Publicado 2026-02-20 · Atualizado 2026-02-24 · CVE-2024-54222

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Seraphinite Solutions Seraphinite Accelerator versions through 2.22.15

Description A missing authorization issue exists in Seraphinite Accelerator, potentially allowing retrieval of embedded sensitive data. The issue affects the seraphinite-accelerator component. No information is available regarding the number of potentially affected devices or any real-world incidents where this issue was exploited. The vulnerability allows unauthorized access to data. The affected component does not have specific API endpoints or vulnerable parameters mentioned in the provided information.

Recommendations Update Seraphinite Accelerator to a version later than 2.22.15.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2024-54222

Produtos afetados

Seraphinite Accelerator

Referências · 5

• https://twitter.com/CVEnew/status/2025524083706790014 · Publicação no Twitter
• https://reddit.com/r/CVEWatch/comments/1rceid9/top_10_trending_cves_23022026 · Publicação no Reddit
• https://patchstack.com/database/Wordpress/Plugin/seraphinite-accelerator/vulnerability/wordpress-seraphinite-accelerator-plugin-2-22-15-authenticated-sensitive-data-exposure-vulnerability?_s_id=cve · Nota
• https://reddit.com/r/CVEWatch/comments/1rdd7q5/top_10_trending_cves_24022026 · Publicação no Reddit
• https://nvd.nist.gov/vuln/detail/CVE-2024-54222 · Nota de Segurança