medium5.7
CVE-2026-87828
The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated…
Impact
The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire admin area inaccessible to all administrators (denial of service).
Affected products
| Product | Affected versions |
|---|---|
| Seraphinite Accelerator WordPress Plugin | before 2.29.24 |
Versions were read from the advisory text. No structured product data has been published for this record yet.