CVE-2026-111625

10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajaxpush that allows Contributor-level multisite users to publish posts on other network sites. Attackers can use the dt-push nonce with a chosen connection id and postStatus to create draft or published posts on site...

CVE-2026-111628

10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to instantiate PHP objects by double unserializing distributed post meta. Attackers can store a serialized PHP string as meta, which setmeta in includes/utils.php unserializes on the...

CVE-2026-111628

10up Distributor versions before 2.3.2 are vulnerable to a PHP object injection flaw. The root cause is the double unsererialization of distributed post meta within the set_meta() function located in includes/utils.php. This allows users with Contributor-level privileges to store a serialized PHP...

EUVD-2026-103050

10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to instantiate PHP objects by double unserializing distributed post meta. Attackers can store a serialized PHP string as meta, which setmeta in includes/utils.php unserializes on the...

CVE-2026-111625

The 10up Distributor software (versions before 2.3.2 ) contains a missing authorization vulnerability within the ajax_push() function. This flaw allows Contributor-level multisite users to publish posts on other network sites to which they do not have access. By utilizing a dt-push nonce combined...

EUVD-2026-103047

10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajaxpush that allows Contributor-level multisite users to publish posts on other network sites. Attackers can use the dt-push nonce with a chosen connection id and postStatus to create draft or published posts on site...

PT-2026-116024

10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax push that allows Contributor-level multisite users to publish posts on other network sites. Attackers can use the dt-push nonce with a chosen connection id and postStatus to create draft or published posts on sit...

PT-2026-116027

10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to instantiate PHP objects by double unserializing distributed post meta. Attackers can store a serialized PHP string as meta, which set meta in includes/utils.php unserializes on the...