Unknown Create vulnerabilities

• catch themes create Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication CVE-2026-18037 6.5 MediumAugust 9, 2026
• catch themes create Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication CVE-2026-16992 6.5 MediumAugust 9, 2026
• unknown create block theme Create Block Theme < 2.10.0 - Admin+ PHP Code Injection via Pattern Save (Multisite) CVE-2026-16623 8.0 HighAugust 4, 2026
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 more Popup Builder < 4.1.11 - Admin+ Stored Cross-Site Scripting CVE-2022-1894 4.8 MediumJuly 11, 2022
• unknown bulk edit and create user profiles – wp sheet editor, wpsheeteditor bulk edit and create user profiles - wp sheet editor +1 more Bulk Edit and Create User Profiles < 1.5.14 - Admin+ Stored Cross-Site Scripting CVE-2022-1089 4.8 MediumMay 16, 2022
• documentor project documentor, unknown documentor – create product documentation +1 more Documentor <= 1.5.3 - Unauthenticated SQLi CVE-2022-0773 EPSS 43.3% 9.8 CriticalMay 2, 2022
• sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 more Popup Builder < 4.1.1 - SQL Injection to Reflected Cross-Site Scripting CVE-2022-0479 EPSS 43.8% 9.8 CriticalMarch 28, 2022
• wow-company wow countdowns, unknown wow countdowns – easily create any countdowns, counters and timers +1 more Wow Countdowns <= 3.1.2 - Admin+ SQLi CVE-2021-25064 7.2 HighMarch 28, 2022
• sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 more Popup Builder < 4.0.7 - Admin+ SQL Injection CVE-2022-0228 7.2 HighFebruary 21, 2022
• sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 more Popup Builder < 4.0.7 - LFI to RCE CVE-2021-25082 8.8 HighFebruary 21, 2022
• wow-company wpcalc, unknown wpcalc – create any online calculators +1 more WPcalc <= 2.1 - Authenticated SQL Injection CVE-2021-25054 8.8 HighJanuary 10, 2022
• wow-company modal window, unknown modal window – create popup modal window +1 more Modal Window < 5.2.2 - RFI leading to RCE via CSRF CVE-2021-25051 8.8 HighJanuary 10, 2022
• wow-company wow forms, unknown wow forms – create any form with custom style +1 more Wow Forms <= 3.1.3 - Admin+ SQL Injection CVE-2021-24628 7.2 HighNovember 8, 2021
• muneeb form builder | create responsive contact forms, web-settler form builder +1 more Form Builder < 1.9.8.4 - Authenticated Stored Cross-Site Scripting CVE-2021-24513 5.4 MediumSeptember 6, 2021
• taxopress, unknown taxopress – create and manage taxonomies, tags, categories +1 more TaxoPress < 3.0.7.2 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24444 Public exploit 4.8 MediumAugust 2, 2021
• cartflows, unknown funnel builder by cartflows – create high converting sales funnels for wordpress +1 more Funnel Builder by CartFlows < 1.6.13 - Authenticated Stored XSS via FB Pixel ID and Google Analytics ID CVE-2021-24330 4.8 MediumJune 1, 2021