What’s Vulnerable › Products

10up ElasticPress vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your 10up ElasticPress version is affected

Latest 10up ElasticPress vulnerabilities

• CVE-2026-62088 — WordPress ElasticPress plugin <= 5.3.4 - Sensitive Data Exposure vulnerability (CVSS 5.3)
• CVE-2024-35684 — WordPress ElasticPress plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
• CVE-2023-48753 — WordPress Restricted Site Access plugin <= 7.4.1 - IP Restriction Bypass vulnerability (CVSS 5.3)
• CVE-2021-4405 — ElasticPress <= 3.5.3 - Cross-Site Request Forgery Bypass (CVSS 4.3)