10up Distributor
3 CVEs affecting 10up Distributor. Latest disclosed: 2026-10-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-111631 | Medium | 5.4 | 2026-10-16 | Distributor before 2.3.2 contains a missing authorization vulnerability that allows Contributor-level users to invoke external connection AJAX actions intended… |
CVE-2026-111628 | Medium | 5.0 | 2026-10-16 | 10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to instantiate PHP objects by double unserializ… |
CVE-2026-111625 | Medium | 5.0 | 2026-10-16 | 10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax_push() that allows Contributor-level multisite users to publish posts on o… |