10up Elasticpress
3 CVEs affecting 10up Elasticpress. Latest disclosed: 2026-09-11. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-62088 | Medium | 5.3 | 2026-09-11 | Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data. This issue affects ElasticPress… |
CVE-2024-35684 | Medium | 4.3 | 2024-06-08 | Cross-Site Request Forgery (CSRF) vulnerability in 10up ElasticPress elasticpress.This issue affects ElasticPress: from n/a through <= 5.1.1. |
CVE-2021-4405 | Medium | 4.3 | 2023-07-01 | The ElasticPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.3. This is due to missing or incorrect… |