SolidWP vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20242
3. 20251

Newest CVEs

• CVE-2025-1123

  Solid Mail – SMTP email and logging made by SolidWP <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting via Email

  solidwp · Solid Mail – SMTP email and logging made by SolidWP

  High7.2
• CVE-2023-40001

  WordPress iThemes Sync plugin <= 2.1.13 - Broken Access Control vulnerability

  SolidWP · iThemes Sync

  Medium4.3
• CVE-2022-44593

  WordPress Solid Security plugin <= 9.3.1 - IP Spoofing Leading to Denial of Service vulnerability

  SolidWP · Solid Security

  Low3.7
• CVE-2023-28786

  WordPress Solid Security Plugin <= 8.1.4 is vulnerable to Open Redirection

  SolidWP · Solid Security – Password, Two Factor Authentication, and Brute Force Protection

  Low3.7