[ Vendor · 6 CVEs ]
10up
CVEs affecting 10up published in the last 30 days, plus any 10up CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111631 | 16 Oct 2026 | CVSS 5.4 | 10up DistributorDistributor before 2.3.2 contains a missing authorization vulnerability that allows Contributor-level users to invoke external connection AJAX… | |
| CVE-2026-111625 | 16 Oct 2026 | CVSS 5.0 | 10up Distributor10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax_push() that allows Contributor-level multisite users to publish… | |
| CVE-2026-111628 | 16 Oct 2026 | CVSS 5.0 | 10up Distributor10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to instantiate PHP objects by double… | |
| CVE-2026-110227 | 14 Oct 2026 | CVSS 5.3 | 10up Restricted Site AccessMissing Authorization vulnerability in 10up Restricted Site Access restricted-site-access allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-94672 | 30 Sep 2026 | CVSS 4.3 | 10up Safe SVGContributor Insecure Direct Object References (IDOR) in Safe SVG <= 2.5.0 versions. | |
| CVE-2026-94077 | 30 Sep 2026 | CVSS 6.5 | 10up Safe SVGContributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions. |