Skip to content
OpenAdvisories

Product · 10up

Distributor

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-111631

    Distributor before 2.3.2 Missing Authorization in External Connection AJAX Actions

    Distributor before 2.3.2 contains a missing authorization vulnerability that allows Contributor-level users to invoke external connection AJAX actions intended for manage_options users. Attackers can call dt_verify_external_connection with a chosen endpointId…

    10up Distributor
  • Medium 5.0
    CVE-2026-111628

    10up Distributor before 2.3.2 PHP Object Injection via set_meta()

    10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to instantiate PHP objects by double unserializing distributed post meta. Attackers can store a serialized PHP string as meta, which set_meta() in …

    10up Distributor
  • Medium 5.0
    CVE-2026-111625

    10up Distributor before 2.3.2 Missing Authorization via dt_push AJAX Action

    10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax_push() that allows Contributor-level multisite users to publish posts on other network sites. Attackers can use the dt-push nonce with a chosen connection id and postStatus t…

    10up Distributor