102 matches found
CVE-2026-18037
The Create WordPress plugin (by Mediavine) versions prior to 2.5.4 is vulnerable to an authorization bypass. The root cause is a missing authorization check on a public REST API route , which allows unauthenticated attackers to read unpublished content . Furthermore, accessing this route triggers...
CVE-2026-18037 Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication
The Create WordPress plugin before 2.5.4 does not perform an authorization check before rendering content over one of its public REST API routes, and that route additionally publishes the requested content as a side effect, allowing unauthenticated attackers to read unpublished content and to mak...
CVE-2026-65490
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embedded Sensitive Data.This issue affects Create: from n/a through 2.6.0...
CVE-2026-25424
Contributor Broken Access Control in Mediavine Control Panel = 2.10.10 versions...
CVE-2026-24552
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create mediavine-create allows Blind SQL Injection.This issue affects Create: from n/a through 2.5.3...
EUVD-2026-48101
Unauthenticated Sensitive Data Exposure in Create by Mediavine = 2.5.3 versions...
CVE-2026-65490 WordPress Create by Mediavine plugin <= 2.6.0 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embedded Sensitive Data.This issue affects Create: from n/a through 2.6.0...
CVE-2026-65490
Unauthenticated Sensitive Data Exposure in Create by Mediavine = 2.5.3 versions...
CVE-2026-65490
The CVE-2026-65490 entry concerns the WordPress plugin Create by Mediavine (versions <= 2.5.3), with unauthenticated sensitive data exposure identified. The connected records confirm the affected software (Create by Mediavine plugin) and the version bound (
CVE-2026-65490 WordPress Create by Mediavine plugin <= 2.6.0 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embedded Sensitive Data.This issue affects Create: from n/a through 2.6.0...
CVE-2026-25424 WordPress Mediavine Control Panel plugin <= 2.10.10 - Broken Access Control vulnerability
Contributor Broken Access Control in Mediavine Control Panel = 2.10.10 versions...
EUVD-2026-48148
Contributor Broken Access Control in Mediavine Control Panel = 2.10.10 versions...
CVE-2026-25424
CVE-2026-25424 concerns the WordPress Mediavine Control Panel plugin, affected in versions
CVE-2026-25424 WordPress Mediavine Control Panel plugin <= 2.10.10 - Broken Access Control vulnerability
Contributor Broken Access Control in Mediavine Control Panel = 2.10.10 versions...
CVE-2026-24552 WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create mediavine-create allows Blind SQL Injection.This issue affects Create: from n/a through 2.5.3...
CVE-2026-24552 WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create mediavine-create allows Blind SQL Injection.This issue affects Create: from n/a through 2.5.3...
CVE-2026-24552
CVE-2026-24552 concerns the WordPress plugin “Create by Mediavine” (versions
EUVD-2026-48144
Contributor SQL Injection in Create by Mediavine = 2.5.3 versions...
PT-2026-63911
Unauthenticated Sensitive Data Exposure in Create by Mediavine = 2.5.3 versions...
CVE-2026-65490: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embedded Sensitive Data.This issue affects Create: from n/a through 2.6.0...