Skip to content
OpenAdvisories

Product · John-Michael L'Allier

Create

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-125046

    WordPress Create plugin <= 3.1.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in John-Michael L'Allier Create mediavine-create allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Create: from n/a through 3.1.1.

    John-Michael L'Allier Create
  • Medium 6.5
    CVE-2026-125045

    WordPress Create plugin <= 3.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in John-Michael L'Allier Create mediavine-create allows Stored XSS.This issue affects Create: from n/a through 3.1.1.

    John-Michael L'Allier Create
  • Medium 5.3
    CVE-2026-65490

    WordPress Create by Mediavine plugin <= 2.6.0 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embedded Sensitive Data.This issue affects Create: from n/a through 2.6.0.

    John-Michael L'Allier Create