All 6 CVE vulnerabilities found in Create, with AI-generated Chinese analysis, references, and POCs.
Vendor: mischiefmarmot
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-18037 | Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication | - | - | 2026-08-09 |
| CVE-2026-16992 | Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication | - | - | 2026-08-09 |
| CVE-2026-24552 | WordPress Create plugin <= 2.5.3 - SQL Injection vulnerability CWE-89 | 8.5 | High | 2026-07-23 |
| CVE-2024-47356 | WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerability CWE-79 | 5.1 | Medium | 2024-10-06 |
| CVE-2024-5601 | Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode CWE-79 | 6.4 | Medium | 2024-06-27 |
| CVE-2024-1711 | Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id' CWE-89 | 9.8 | Critical | 2024-03-20 |
All 6 known CVE vulnerabilities affecting Create with full Chinese analysis, references, and POCs where available.