Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: John-Michael L'Allier Clear all filters
TI-2026-46660 CVE-2026-65490 · GHSA-qmj8-gc4f-cmv3

WordPress Create by Mediavine plugin <= 2.6.0 - Sensitive Data Exposure vulnerability

Priority LOW 30

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embedded Sensitive Data.This issue affects Create: from n/a throug…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0033 Published 2026-07-23 No fix listed CWE-497
TI-2026-19792 CVE-2026-24552 · GHSA-9299-rf7x-c527

WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in John-Michael L'Allier Create mediavine-create allows Blind SQL Injection.This issue affects Create: from n/a through 2…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00357 Published 2026-07-23 No fix listed CWE-89