10up Distributor

• CVE-2026-111631 Medium 5.4 Distributor before 2.3.2 Missing Authorization in External Connection AJAX Actions 0.2%
• CVE-2026-111628 Medium 5.0 10up Distributor before 2.3.2 PHP Object Injection via set_meta() 0.3%
• CVE-2026-111625 Medium 5.0 10up Distributor before 2.3.2 Missing Authorization via dt_push AJAX Action 0.2%