Mediavine vulnerabilities

Products

• Create 4
• Control Panel 4
• Create By Mediavine 2

Newest

• mediavine control panel WordPress Mediavine Control Panel plugin <= 2.10.10 - Broken Access Control vulnerability CVE-2026-25424 4.3 MediumJuly 23, 2026
• mediavine control panel WordPress Mediavine Control Panel plugin <= 2.10.6 - Sensitive Data Exposure vulnerability CVE-2025-39556 5.3 MediumApril 16, 2025
• mediavine create, create by mediavine +1 more WordPress Create by Mediavine plugin <= 1.9.8 - Sensitive Data Exposure vulnerability CVE-2024-43264 5.3 MediumAugust 26, 2024
• mediavine control panel WordPress Mediavine Control Panel plugin <= 2.10.4 - Cross Site Scripting (XSS) vulnerability CVE-2024-43218 6.5 MediumAugust 12, 2024
• mediavine create, create by mediavine +1 more WordPress Create by Mediavine plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability CVE-2024-37495 6.5 MediumJuly 21, 2024
• catch themes create Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode CVE-2024-5601 6.4 MediumJune 27, 2024
• catch themes create Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id' CVE-2024-1711 9.8 CriticalMarch 20, 2024
• mediavine control panel WordPress Mediavine Control Panel Plugin <= 2.10.2 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-44259 4.3 MediumOctober 10, 2023