mischiefmarmot

Products

ProductCVEsExploitedLatest
Create4–Sep 19, 2026
Create by Mediavine2–Aug 26, 2024

Exploited and recent CVEs

  • CVE-2026-13200 Medium 6.5 Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order' Parameter 0.4%
  • CVE-2026-13191 Medium 6.5 Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order_by' Parameter 0.5%
  • CVE-2024-43264 Medium 5.3 WordPress Create by Mediavine plugin <= 1.9.8 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2024-37495 Medium 6.5 WordPress Create by Mediavine plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-5601 Medium 6.4 Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode 0.3%
  • CVE-2024-1711 Critical 9.8 Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id' 0.7%