Distributor
Approved changes feed: RSS · Atom
cpe:2.3:a:10up:distributor:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | 10Up (881e212c-90bc-5d75-a450-4d45d1038060) |
|---|---|
| Product | Distributor (5587aadd-0c49-5a06-a427-c527728b770c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111628 |
vulnerable | 2026-11-03 10:16:10.907189 |
10up Distributor before 2.3.2 PHP Object Injection via set_meta()
MEDIUM (5)
10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to instantiate PHP objects by double unserializing distributed post meta. Attackers can store a serialized PHP string as meta, which set_meta() in includes/utils.php unserializes on the destination site, storing attacker-defined objects whose impact depends on loaded gadget classes.
Published: 2026-10-16T17:39:02.847Z
Updated: 2026-10-23T18:34:49.579Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111625 |
vulnerable | 2026-11-03 10:16:10.667284 |
10up Distributor before 2.3.2 Missing Authorization via dt_push AJAX Action
MEDIUM (5)
10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax_push() that allows Contributor-level multisite users to publish posts on other network sites. Attackers can use the dt-push nonce with a chosen connection id and postStatus to create draft or published posts on sites they cannot access.
Published: 2026-10-16T17:39:00.780Z
Updated: 2026-10-19T13:05:49.838Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.