CVE-2026-62088

Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data. This issue affects ElasticPress: from n/a through 5.3.4...

EUVD-2026-76191

Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data. This issue affects ElasticPress: from n/a through 5.3.4...

CVE-2026-62088

The ElasticPress WordPress plugin (by 10up), versions through 5.3.4 , is affected by a Sensitive Data Exposure vulnerability classified as Insertion of Sensitive Information Into Sent Data. An unauthenticated remote attacker can retrieve embedded sensitive data, with a CVSS v3.1 score of 5.3 (Med...

CVE-2026-62088 WordPress ElasticPress plugin <= 5.3.4 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data. This issue affects ElasticPress: from n/a through 5.3.4...

WordPress ElasticPress plugin <= 5.3.4 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by murloc.mrglwglwgl in WordPress Plugin ElasticPress versions = 5.3.4...

EUVD-2024-35443

Malicious code in bioql PyPI...

EUVD-2021-34232

Malicious code in bioql PyPI...

CVE-2024-35684

Cross-Site Request Forgery CSRF vulnerability in 10up ElasticPress elasticpress.This issue affects ElasticPress: from n/a through = 5.1.1...

CVE-2021-4405

The ElasticPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.3. This is due to missing or incorrect nonce validation on the epiosendautosuggestallowed function. This makes it possible for unauthenticated attackers to send allowed paramete...

ElasticPress < 5.1.2 - Data Sync via CSRF

Description The plugin is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on the dosync function. This makes it possible for unauthenticated attackers to sync data via a forged request granted they can trick a site administrator into performing an action such...

CVE-2024-35684

Cross-Site Request Forgery CSRF vulnerability in 10up ElasticPress.This issue affects ElasticPress: from n/a through 5.1.1...

CVE-2024-35684

Cross-Site Request Forgery CSRF vulnerability in 10up ElasticPress elasticpress.This issue affects ElasticPress: from n/a through = 5.1.1...

CVE-2024-35684 WordPress ElasticPress plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in 10up ElasticPress elasticpress.This issue affects ElasticPress: from n/a through = 5.1.1...

CVE-2024-35684 WordPress ElasticPress plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in 10up ElasticPress elasticpress.This issue affects ElasticPress: from n/a through = 5.1.1...

CVE-2024-35684

Technical details about CVE-2024-35684 (ElasticPress CSRF) are not publicly provided in the supplied documents. No affected versions, exploit info, or fixes are specified here; monitor for official advisories.

PT-2024-26632 · 10Up · Elasticpress

Name of the Vulnerable Software and Affected Versions: ElasticPress versions prior to 5.1.1 Description: A Cross-Site Request Forgery CSRF issue affects the 10up ElasticPress, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations: For versions...

WordPress plugin ElasticPress Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

WordPress ElasticPress plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ElasticPress versions = 5.1.1...

WordPress ElasticPress Plugin <= 5.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software ElasticPress Type Plugin Vulnerable versions = 5.1.1 Fixed in 5.1.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-35684 Patch priority Low CVSS severity Low 4.3 Developer 10up PSID fbb3d18344c4 Credits Ananda Dhakal Patchstack Required...

CVE-2021-4405

The ElasticPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.3. This is due to missing or incorrect nonce validation on the epiosendautosuggestallowed function. This makes it possible for unauthenticated attackers to send allowed paramete...