Lucene search
+L

27 matches found

NVD
NVD
added 2024/08/26 9:15 p.m.53 views

CVE-2024-43264

Insertion of Sensitive Information Into Sent Data vulnerability in mischiefmarmot Create by Mediavine mediavine-create.This issue affects Create by Mediavine: from n/a through = 1.9.8...

7.5CVSS0.0037EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/26 8:12 p.m.76 views

CVE-2024-43264

CVE-2024-43264 describes an Exposure of Sensitive Information to an Unauthorized Actor in the Mediavine Create WordPress plugin. Affected versions are Create by Mediavine up to 1.9.8 (inclusive). The connected sources confirm an unauthenticated exposure of sensitive data and identify the affected...

7.5CVSS5.9AI score0.0037EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/26 12:00 a.m.22 views

PT-2024-30427 · Mediavine · Create By Mediavine

Name of the Vulnerable Software and Affected Versions: Create by Mediavine versions 1.9.8 and earlier Description: This issue exposes sensitive information to unauthorized actors. Users are urged to upgrade to the latest version to mitigate risks. Recommendations: For versions 1.9.8 and earlier,...

7.5CVSS6.4AI score0.0037EPSS
SaveExploits0References7
OSV
OSV
added 2024/07/21 8:15 a.m.10 views

CVE-2024-37495

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Mediavine Create by Mediavine allows Stored XSS.This issue affects Create by Mediavine: from n/a through 1.9.7...

5.4CVSS5.8AI score0.00279EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/21 7:26 a.m.80 views

CVE-2024-37495

CVE-2024-37495 is a Stored XSS in Mediavine Create for WordPress, caused by improper neutralization of input during web page generation. Affected: Create by Mediavine versions n/a through 1.9.7. The vulnerability is documented as a cross-site scripting issue that stores user input and could affec...

6.5CVSS5.9AI score0.00279EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/21 12:00 a.m.15 views

PT-2024-27602 · Mediavine · Create By Mediavine

Name of the Vulnerable Software and Affected Versions: Create by Mediavine versions 1.9.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

6.5CVSS5.6AI score0.00279EPSS
SaveExploits0References5
OSV
OSV
added 2024/06/27 8:15 a.m.10 views

CVE-2024-5601

The Create by Mediavine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Schema Meta shortcode in all versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS6AI score0.00324EPSS
SaveExploits0References4
Rows per page
Query Builder