PT-2026-21031 · Seraphinite Solutions · Seraphinite Accelerator

Dave Jong · CVE-2024-54222 · Published 2026-02-20 · Updated 2026-02-24

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Seraphinite Solutions Seraphinite Accelerator versions through 2.22.15

Description A missing authorization issue exists in Seraphinite Accelerator, potentially allowing retrieval of embedded sensitive data. The issue affects the seraphinite-accelerator component. No information is available regarding the number of potentially affected devices or any real-world incidents where this issue was exploited. The vulnerability allows unauthorized access to data. The affected component does not have specific API endpoints or vulnerable parameters mentioned in the provided information.

Recommendations Update Seraphinite Accelerator to a version later than 2.22.15.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-54222

Affected Products

Seraphinite Accelerator

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-54222 · Security Note
• https://twitter.com/CVEnew/status/2025524083706790014 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1rceid9/top_10_trending_cves_23022026 · Reddit Post
• https://patchstack.com/database/Wordpress/Plugin/seraphinite-accelerator/vulnerability/wordpress-seraphinite-accelerator-plugin-2-22-15-authenticated-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://reddit.com/r/CVEWatch/comments/1rdd7q5/top_10_trending_cves_24022026 · Reddit Post