← CVE Intelligence

CVE-2026-87828

Seraphinite Accelerator < 2.29.24 - Subscriber+ DoS via seraph_accel_State Update PUBLISHED

Description (CNA)

The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire admin area inaccessible to all administrators (denial of service).

Affected (CNA)

Vendor / productVersions
Unknown / Seraphinite Acceleratoraffected 0 before 2.29.24

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.