Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-24552 2 Mischiefmarmot, Wordpress 2 Create By Mediavine, Wordpress 2026-08-06 8.5 High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in John-Michael L'Allier Create allows Blind SQL Injection. This issue affects Create: from n/a through 2.5.3.
CVE-2026-65490 2 Mischiefmarmot, Wordpress 2 Create By Mediavine, Wordpress 2026-07-23 5.3 Medium
Unauthenticated Sensitive Data Exposure in Create by Mediavine <= 2.5.3 versions.