MI
Vendor
mischiefmarmot
6
CVEs
0
On KEV
0
New 30D
Products
CR9.8
Create
mischiefmarmot
4 CVEs0 on KEV0 new
CB7.5
Create by Mediavine
mischiefmarmot
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-13200 | CR Create mischiefmarmot | 6.5 | Sep 19 | Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order' Parameter |
| CVE-2026-13191 | CR Create mischiefmarmot | 6.5 | Sep 19 | Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order_by' Parameter |
| CVE-2024-43264 | CB Create by Mediavine mischiefmarmot | 7.5 | Aug 26 | WordPress Create by Mediavine plugin <= 1.9.8 - Sensitive Data Exposure vulnerability |
| CVE-2024-37495 | CB Create by Mediavine mischiefmarmot | 5.4 | Jul 21 | WordPress Create by Mediavine plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-5601 | CR Create mischiefmarmot | 5.4 | Jun 27 | Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode |
| CVE-2024-1711 | CR Create mischiefmarmot | 9.8 | Mar 20 | Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id' |