Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Create — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Create, with AI-generated Chinese analysis, references, and POCs.

Vendor: mischiefmarmot

CVE ID Title CVSS Severity Published
CVE-2026-13200 Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order' Parameter CWE-89 6.5 Medium 2026-09-19
CVE-2026-13191 Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order_by' Parameter CWE-89 6.5 Medium 2026-09-19
CVE-2026-18037 Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication - - 2026-08-09
CVE-2026-16992 Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication - - 2026-08-09
CVE-2026-65490 WordPress Create by Mediavine plugin <= 2.6.0 - Sensitive Data Exposure vulnerability CWE-497 5.3 Medium 2026-07-23
CVE-2026-24552 WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability CWE-89 8.5 High 2026-07-23
CVE-2024-47356 WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerability CWE-79 5.1 Medium 2024-10-06
CVE-2024-5601 Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode CWE-79 6.4 Medium 2024-06-27
CVE-2024-1711 Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id' CWE-89 9.8 Critical 2024-03-20

All 9 known CVE vulnerabilities affecting Create with full Chinese analysis, references, and POCs where available.