Approved changes feed: RSS · Atom

cpe:2.3:a:mediavine:mediavine_control_panel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMediavine (eb3a0052-2af6-5905-8626-8a702241fb3b)
ProductMediavine Control Panel (f8efde08-6055-5a28-9ab7-3cf24312399c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/WPPlugins/mediavine-control-panel purl2cpe 2026-06-01 10:11:04.847347
pkg:github/wpplugins/mediavine-control-panel purl2cpe 2026-06-01 10:11:04.847343

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-39556 vulnerable 2026-06-08 07:23:06.754661 WordPress Mediavine Control Panel plugin <= 2.10.6 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in mediavine Mediavine Control Panel mediavine-control-panel allows Retrieve Embedded Sensitive Data.This issue affects Mediavine Control Panel: from n/a through <= 2.10.6.
Published: 2025-04-16T12:44:34.974Z
Updated: 2026-04-28T16:12:34.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43218 vulnerable 2026-06-08 06:45:49.885069 WordPress Mediavine Control Panel plugin <= 2.10.4 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mediavine Mediavine Control Panel mediavine-control-panel.This issue affects Mediavine Control Panel: from n/a through <= 2.10.4.
Published: 2024-08-12T21:30:43.060Z
Updated: 2026-04-28T16:10:09.877Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44259 vulnerable 2026-06-08 06:12:39.847716 WordPress Mediavine Control Panel Plugin <= 2.10.2 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Mediavine Mediavine Control Panel plugin <= 2.10.2 versions.
Published: 2023-10-10T08:59:38.357Z
Updated: 2026-04-28T16:08:40.622Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.