A vulnerability in the Create mediavine-create plugin allows retrieval of embedded sensitive data. This issue affects Create from n/a through 2.6.0. The vulnerability can lead to exposure of sensitive information, which could be accessed by unauthorized parties. Defenders should assess the potential impact and prioritize remediation efforts accordingly. The Create mediavine-create plugin versions up to 2. [truncated]
A SQL injection vulnerability exists in the Create plugin by mediavine, affecting versions up to 2.5.3. This issue allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. The vulnerability has a CVSS score of 8.5 and is classified under CWE-89. Defenders responsible for WordPress installations with the Create plugin by mediavine should assess exposure and [truncated]
