10up vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20245
3. 20253
4. 20269

Newest CVEs

• CVE-2026-111631

  Distributor before 2.3.2 Missing Authorization in External Connection AJAX Actions

  10up · Distributor

  Medium5.3
• CVE-2026-111628

  10up Distributor before 2.3.2 PHP Object Injection via set_meta()

  10up · Distributor

  Low2.3
• CVE-2026-111625

  10up Distributor before 2.3.2 Missing Authorization via dt_push AJAX Action

  10up · Distributor

  Medium5.3
• CVE-2026-110227

  WordPress Restricted Site Access plugin <= 7.6.2 - Broken Access Control vulnerability

  10up · Restricted Site Access

  Medium5.3
• CVE-2026-94672

  WordPress Safe SVG plugin <= 2.5.0 - Insecure Direct Object References (IDOR) vulnerability

  10up · Safe SVG

  Medium4.3
• CVE-2026-94077

  WordPress Safe SVG plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

  10up · Safe SVG

  Medium6.5
• CVE-2026-62088

  WordPress ElasticPress plugin <= 5.3.4 - Sensitive Data Exposure vulnerability

  10up · ElasticPress

  Medium5.3
• CVE-2026-5028

  Eight Day Week Print Workflow <= 1.2.6 - Authenticated (Subscriber+) SQL Injection via 'title' Parameter

  10up · Eight Day Week Print Workflow

  Medium6.5
• CVE-2026-25311

  WordPress Autoshare for Twitter plugin <= 2.3.1 - Broken Access Control vulnerability

  10up · Autoshare for Twitter

  Medium5.4
• CVE-2025-67621

  WordPress Eight Day Week Print Workflow plugin <= 1.2.5 - Sensitive Data Exposure vulnerability

  10up · Eight Day Week Print Workflow

  Medium4.3