Mischiefmarmot Create
4 CVEs affecting Mischiefmarmot Create. Latest disclosed: 2026-09-19. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-1711 | Critical | 9.8 | 2024-03-20 | The Create by Mediavine plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.9.4 due to insuffici… |
CVE-2026-13200 | Medium | 6.5 | 2026-09-19 | The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to, and including, 2.5.3 due to insufficien… |
CVE-2026-13191 | Medium | 6.5 | 2026-09-19 | The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions up to, and including, 2.5.3 due to insuffic… |
CVE-2024-5601 | Medium | 6.4 | 2024-06-27 | The Create by Mediavine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Schema Meta shortcode in all versions up to, and inc… |