Skip to content
OpenAdvisories

Product · 10up

ElasticPress

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-62088

    WordPress ElasticPress plugin <= 5.3.4 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data. This issue affects ElasticPress: from n/a through 5.3.4.

    10up ElasticPress
  • Medium 4.3
    CVE-2024-35684

    WordPress ElasticPress plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in 10up ElasticPress elasticpress.This issue affects ElasticPress: from n/a through <= 5.1.1.

    10up ElasticPress
  • Medium 4.3
    CVE-2021-4405

    ElasticPress <= 3.5.3 - Cross-Site Request Forgery Bypass

    The ElasticPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.3. This is due to missing or incorrect nonce validation on the epio_send_autosuggest_allowed() function. This makes it possible for unauthe…

    10up ElasticPress Web / CMS