ME
Vendor
Mediavine
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-25424 | MC Mediavine Control Panel mediavine | 4.3 | Jul 23 | WordPress Mediavine Control Panel plugin <= 2.10.10 - Broken Access Control vulnerability |
| CVE-2025-39556 | MC Mediavine Control Panel mediavine | 5.3 | Apr 16 | WordPress Mediavine Control Panel plugin <= 2.10.6 - Sensitive Data Exposure vulnerability |
| CVE-2024-43264 | CR Create Mediavine | 7.5 | Aug 26 | WordPress Create by Mediavine plugin <= 1.9.8 - Sensitive Data Exposure vulnerability |
| CVE-2024-43218 | MC Mediavine Control Panel mediavine | 6.5 | Aug 12 | WordPress Mediavine Control Panel plugin <= 2.10.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-37495 | CR Create Mediavine | 5.4 | Jul 21 | WordPress Create by Mediavine plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-5601 | CR Create Mediavine | 5.4 | Jun 27 | Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode |
| CVE-2024-1711 | CR Create Mediavine | 9.8 | Mar 20 | Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id' |
| CVE-2023-44259 | MC Mediavine Control Panel Mediavine | 8.8 | Oct 10 | WordPress Mediavine Control Panel Plugin <= 2.10.2 is vulnerable to Cross Site Request Forgery (CSRF) |