sucuri vulnerabilities

Products

• security 1
• Sucuri Security (WordPress plugin) 1
• sucuri/sucuri-wordpress-plugin 1

Latest sucuri CVEs

Newest publication first

1. CVE-2026-73033 Sucuri WordPress Plugin 2.7.3 Path Traversal via integrity.lib.php

   Published 2026-08-10

   High·CVSS 7.0 EPSS 0.93%

   Sucuri Security WordPress plugin through version 2.7.3 contains a path traversal vulnerability in the pageIntegritySubmission() method in src/integrity.lib.php that allows authenticated administrators to delete arbitrary files by supplying directory traversal sequences in the suc...

2. CVE-2022-29489 WordPress Sucuri Security plugin <= 1.8.33 - Cross-Site Request Forgery (CSRF) vulnerability

   Published 2022-09-16

   Medium·CVSS 4.3 EPSS 0.34%

   Cross-Site Request Forgery (CSRF) vulnerability in Sucuri Security plugin <= 1.8.33 at WordPress leading to Event log entry creation.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.