GCVE - cpe:2.3:a:mischiefmarmot:create_by_mediavine:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mischiefmarmot:create_by_mediavine:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mischiefmarmot (`8d3877fa-709e-501e-957e-ed7fec996f55`)
Product	Create By Mediavine (`39b7583f-0080-5eaf-a2de-41e5376fd7b9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-24552`	vulnerable	2026-09-16 04:33:26.414120	WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability HIGH (8.5) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in John-Michael L'Allier Create mediavine-create allows Blind SQL Injection.This issue affects Create: from n/a through 2.5.3. Published: 2026-07-23T11:17:47.929Z Updated: 2026-09-21T17:02:09.908Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/mediavine-create/vulnerability/wordpress-create-by-mediavine-plugin-2-5-3-sql-injection-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-65490`	vulnerable	2026-07-29 01:06:20.077580	WordPress Create by Mediavine plugin <= 2.6.0 - Sensitive Data Exposure vulnerability MEDIUM (5.3) Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embedded Sensitive Data.This issue affects Create: from n/a through 2.6.0. Published: 2026-07-23T11:18:58.080Z Updated: 2026-09-18T16:15:24.802Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/mediavine-create/vulnerability/wordpress-create-by-mediavine-plugin-2-5-3-sensitive-data-exposure-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-43264`	vulnerable	2026-06-08 06:45:49.972272	WordPress Create by Mediavine plugin <= 1.9.8 - Sensitive Data Exposure vulnerability MEDIUM (5.3) Insertion of Sensitive Information Into Sent Data vulnerability in mischiefmarmot Create by Mediavine mediavine-create.This issue affects Create by Mediavine: from n/a through <= 1.9.8. Published: 2024-08-26T20:12:13.465Z Updated: 2026-04-28T16:10:11.497Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/mediavine-create/vulnerability/wordpress-create-by-mediavine-plugin-1-9-7-sensitive-data-exposure-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-37495`	vulnerable	2026-06-08 06:39:47.716109	WordPress Create by Mediavine plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability MEDIUM (6.5) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mischiefmarmot Create by Mediavine mediavine-create.This issue affects Create by Mediavine: from n/a through <= 1.9.7. Published: 2024-07-21T07:26:57.580Z Updated: 2026-04-28T16:09:59.994Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/mediavine-create/vulnerability/wordpress-create-by-mediavine-plugin-1-9-7-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.