Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

SeedProd Pro Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 5 vulnerability records associated with SeedProd Pro, published between 2024 and 2026.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

5Total records
0Critical
2High
3Medium
0Low
0Informational
5Patched records
0Currently marked unpatched
2024-12-11First disclosure
2026-06-25Latest disclosure
5 of 5CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
202433 records
202622 records

Severity Breakdown

SeverityRecordsShare
High240%
Medium360%

Vulnerability-Type Breakdown

Other

2 records40%

First: 2024. Latest: 2026.

SQL Injection

2 records40%

First: 2024. Latest: 2024.

Cross-Site Scripting

1 record20%

First: 2026. Latest: 2026.

Patch Status

Patched
5
Currently marked unpatched
0
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 6.19.5
  • 6.18.13
  • 6.18.14

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
[*, 6.19.5)SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingJune 25, 20266.19.5Medium
[*, 6.19.5)SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Local File InclusionMay 27, 20266.19.5High
*-6.18.12SeedProd Pro <= 6.18.12 - Authenticated (Editor+) SQL InjectionDecember 11, 20246.18.13Medium
*-6.18.12SeedProd Pro <= 6.18.12 - Authenticated (Administrator+) SQL InjectionDecember 11, 20246.18.13Medium
*-6.18.13SeedProd Pro <= 6.18.13 - Authenticated (Editor+) Remote Code ExecutionDecember 11, 20246.18.14High

Selected source records

Latest Records

MediumCVE-2026-57617

SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: June 25, 2026

Affected versions
[*, 6.19.5)
Patched versions
6.19.5
Original Wordfence record
HighCVE-2026-48972

SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Local File Inclusion

Published: May 27, 2026

Affected versions
[*, 6.19.5)
Patched versions
6.19.5
Original Wordfence record
HighCVE-2024-54285

SeedProd Pro <= 6.18.13 - Authenticated (Editor+) Remote Code Execution

Published: December 11, 2024

Affected versions
*-6.18.13
Patched versions
6.18.14
Original Wordfence record
MediumCVE-2024-54284

SeedProd Pro <= 6.18.12 - Authenticated (Administrator+) SQL Injection

Published: December 11, 2024

Affected versions
*-6.18.12
Patched versions
6.18.13
Original Wordfence record
MediumCVE-2024-54283

SeedProd Pro <= 6.18.12 - Authenticated (Editor+) SQL Injection

Published: December 11, 2024

Affected versions
*-6.18.12
Patched versions
6.18.13
Original Wordfence record

Highest-Severity Records

HighCVE-2026-48972

SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Local File Inclusion

Published: May 27, 2026

Affected versions
[*, 6.19.5)
Patched versions
6.19.5
Original Wordfence record
HighCVE-2024-54285

SeedProd Pro <= 6.18.13 - Authenticated (Editor+) Remote Code Execution

Published: December 11, 2024

Affected versions
*-6.18.13
Patched versions
6.18.14
Original Wordfence record
MediumCVE-2026-57617

SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: June 25, 2026

Affected versions
[*, 6.19.5)
Patched versions
6.19.5
Original Wordfence record
MediumCVE-2024-54284

SeedProd Pro <= 6.18.12 - Authenticated (Administrator+) SQL Injection

Published: December 11, 2024

Affected versions
*-6.18.12
Patched versions
6.18.13
Original Wordfence record
MediumCVE-2024-54283

SeedProd Pro <= 6.18.12 - Authenticated (Editor+) SQL Injection

Published: December 11, 2024

Affected versions
*-6.18.12
Patched versions
6.18.13
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory