What’s Vulnerable › Products

mischiefmarmot Create vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your mischiefmarmot Create version is affected

Latest mischiefmarmot Create vulnerabilities

• CVE-2026-13200 — Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order' Parameter (CVSS 6.5)
• CVE-2026-13191 — Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order_by' Parameter (CVSS 6.5)
• CVE-2024-43264 — WordPress Create by Mediavine plugin <= 1.9.8 - Sensitive Data Exposure vulnerability (CVSS 7.5)
• CVE-2024-37495 — WordPress Create by Mediavine plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-5601 — Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode (CVSS 5.4)
• CVE-2024-1711 — Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id' (CVSS 9.8)