mischiefmarmot vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20262

Newest CVEs

• CVE-2026-13200

  Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order' Parameter

  mischiefmarmot · Create

  Medium6.5
• CVE-2026-13191

  Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order_by' Parameter

  mischiefmarmot · Create

  Medium6.5
• CVE-2024-43264

  WordPress Create by Mediavine plugin <= 1.9.8 - Sensitive Data Exposure vulnerability

  mischiefmarmot · Create by Mediavine

  Medium5.3
• CVE-2024-37495

  WordPress Create by Mediavine plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability

  mischiefmarmot · Create by Mediavine

  Medium6.5
• CVE-2024-5601

  Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode

  mischiefmarmot · Create

  Medium6.4
• CVE-2024-1711

  Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id'

  mischiefmarmot · Create

  Critical9.8