Create

24 known CVEs 6K+ active installs

Scan My Site Free
UNKNOWN: 24
Known Vulnerabilities 24
CVE-2026-13200 UNKNOWN EPSS 0.4%
Published 2026-09-19 · Affected: ≤2.5.3 · Fixed in 2.5.3
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter
CVE-2026-13191 UNKNOWN EPSS 0.4%
Published 2026-09-19 · Affected: ≤2.5.3 · Fixed in 2.5.3
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parame
CVE-2024-47356 UNKNOWN EPSS 0.1%
Published 2024-10-06 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through <= 2.9.1.
CVE-2024-47356 UNKNOWN EPSS 0.1%
Published 2024-10-06 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through <= 2.9.1.
CVE-2024-47356 UNKNOWN EPSS 0.1%
Published 2024-10-06 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through <= 2.9.1.
CVE-2024-47356 UNKNOWN EPSS 0.1%
Published 2024-10-06 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through <= 2.9.1.
CVE-2024-47356 UNKNOWN EPSS 0.1%
Published 2024-10-06 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through <= 2.9.1.
CVE-2024-47356 UNKNOWN EPSS 0.1%
Published 2024-10-06 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through <= 2.9.1.
CVE-2024-47356 UNKNOWN EPSS 0.1%
Published 2024-10-06 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through <= 2.9.1.
CVE-2024-47356 UNKNOWN EPSS 0.1%
Published 2024-10-06 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through <= 2.9.1.
CVE-2024-47356 UNKNOWN EPSS 0.1%
Published 2024-10-06 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through <= 2.9.1.
CVE-2024-47356 UNKNOWN EPSS 0.1%
Published 2024-10-06 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through <= 2.9.1.
CVE-2024-47356 UNKNOWN EPSS 0.1%
Published 2024-10-06 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through <= 2.9.1.
CVE-2024-47356 UNKNOWN EPSS 0.1%
Published 2024-10-06 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through <= 2.9.1.
CVE-2024-43264 UNKNOWN EPSS 0.3%
Published 2024-08-26 · Affected: See advisory
Insertion of Sensitive Information Into Sent Data vulnerability in mischiefmarmot Create by Mediavine mediavine-create.This issue affects Create by Mediavine: from n/a through <= 1.9.8.
CVE-2024-43264 UNKNOWN EPSS 0.3%
Published 2024-08-26 · Affected: See advisory
Insertion of Sensitive Information Into Sent Data vulnerability in mischiefmarmot Create by Mediavine mediavine-create.This issue affects Create by Mediavine: from n/a through <= 1.9.8.
CVE-2024-43264 UNKNOWN EPSS 0.3%
Published 2024-08-26 · Affected: See advisory
Insertion of Sensitive Information Into Sent Data vulnerability in mischiefmarmot Create by Mediavine mediavine-create.This issue affects Create by Mediavine: from n/a through <= 1.9.8.
CVE-2024-43264 UNKNOWN EPSS 0.3%
Published 2024-08-26 · Affected: See advisory
Insertion of Sensitive Information Into Sent Data vulnerability in mischiefmarmot Create by Mediavine mediavine-create.This issue affects Create by Mediavine: from n/a through <= 1.9.8.
CVE-2024-37495 UNKNOWN EPSS 0.2%
Published 2024-07-21 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mischiefmarmot Create by Mediavine mediavine-create.This issue affects Create by Mediavine: from n
CVE-2024-37495 UNKNOWN EPSS 0.2%
Published 2024-07-21 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mischiefmarmot Create by Mediavine mediavine-create.This issue affects Create by Mediavine: from n
CVE-2024-37495 UNKNOWN EPSS 0.2%
Published 2024-07-21 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mischiefmarmot Create by Mediavine mediavine-create.This issue affects Create by Mediavine: from n
CVE-2024-37495 UNKNOWN EPSS 0.2%
Published 2024-07-21 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mischiefmarmot Create by Mediavine mediavine-create.This issue affects Create by Mediavine: from n
CVE-2024-5601 UNKNOWN EPSS 0.3%
Published 2024-06-27 · Affected: See advisory
The Create by Mediavine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Schema Meta shortcode in all versions up to, and including, 1.9.7 due to insufficient input s
CVE-2024-5601 UNKNOWN EPSS 0.3%
Published 2024-06-27 · Affected: See advisory
The Create by Mediavine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Schema Meta shortcode in all versions up to, and including, 1.9.7 due to insufficient input s

Is Create running on your site?

A free scan detects your plugins and flags any that match these CVEs.

Scan My Site Free