PULSEUnderground Intel

LIVE50signals / 24h

FEED

ransomkillsec reclama a cashcowboy · US · Financial Servicesransomkillsec reclama a Bulwark Exterminating · US · Otherransomkillsec reclama a origins ivf · IN · Healthcareransomqilin reclama a Machinerie P&W · CA · Manufacturingransomqilin reclama a ABM Enviro · CA · Professional Servicesransomkrybit reclama a nilepet.com · EG · Retail & E-Commerceransomthegentlemen reclama a European Design · CA · Otherransomthegentlemen reclama a MK Jewelry · MK · Retail & E-Commerceransomthegentlemen reclama a GUERREIROS seguros · PT · Financial Servicesransomthegentlemen reclama a Tikona Infinet · IN · Technologyransomthegentlemen reclama a TC Printing · AU · Manufacturingransomthegentlemen reclama a Oldelval Oleoductos del Valle · AR · Energy & Utilitiesransomthegentlemen reclama a Decoupe Laser Services · FR · Manufacturingransomthegentlemen reclama a Thialf · NL · Energy & Utilitiesransomkillsec reclama a cashcowboy · US · Financial Servicesransomkillsec reclama a Bulwark Exterminating · US · Otherransomkillsec reclama a origins ivf · IN · Healthcareransomqilin reclama a Machinerie P&W · CA · Manufacturingransomqilin reclama a ABM Enviro · CA · Professional Servicesransomkrybit reclama a nilepet.com · EG · Retail & E-Commerceransomthegentlemen reclama a European Design · CA · Otherransomthegentlemen reclama a MK Jewelry · MK · Retail & E-Commerceransomthegentlemen reclama a GUERREIROS seguros · PT · Financial Servicesransomthegentlemen reclama a Tikona Infinet · IN · Technologyransomthegentlemen reclama a TC Printing · AU · Manufacturingransomthegentlemen reclama a Oldelval Oleoductos del Valle · AR · Energy & Utilitiesransomthegentlemen reclama a Decoupe Laser Services · FR · Manufacturingransomthegentlemen reclama a Thialf · NL · Energy & Utilities

CVE WatchJul 23, 2026

CVE-2026-24552

Contributor SQL Injection in Create by Mediavine <= 2.5.3 versions.

CVSS

8.5

High

EPSS

—

KEV

—

Exploit Today

0

0-100

Published: Jul 23, 2026 · Last modified: Jul 23, 2026 · CWE-89

EPSS · 30d

Not enough EPSS history yet.

Technical description

Contributor SQL Injection in Create by Mediavine <= 2.5.3 versions.

Official references

patchstack.comhttps://patchstack.com/database/wordpress/plugin/mediavine-create/vulnerability/wordpress-create-by-mediavine-plugin-2-5-3-sql-injection-vulnerability?_s_id=cve

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-65761—

———Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions.49m CVE-2026-655327.6 HIG

——0Shop manager SQL Injection in Persian Woocommerce SMS <= 7.2.2 versions.2h CVE-2026-655268.5 HIG

——0Contributor SQL Injection in Visualizer <= 4.0.6 versions.2h CVE-2026-654947.1 HIG

——0Subscriber SQL Injection in Dokan Pro <= 5.0.2 versions.4h CVE-2026-654627.6 HIG

——0Administrator SQL Injection in Uncanny Automator <= 7.3.2 versions.3h CVE-2026-654548.5 HIG

——0Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions.2h