Skip to content
Sign in

Known vulnerabilities in 10up ElasticPress

Is your version affected?

CVE list

CVE Summary Score Published
CVE-2026-62088 Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded… 5.3 Medium Sep 11, 2026
CVE-2024-35684 Cross-Site Request Forgery (CSRF) vulnerability in 10up ElasticPress elasticpress.This issue affects ElasticPress:… 4.3 Medium Jun 8, 2024
CVE-2023-48753 Authentication Bypass by Spoofing vulnerability in 10up Restricted Site Access allows Accessing Functionality Not… 5.3 Medium Jun 4, 2024
CVE-2021-4405 The ElasticPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,… 4.3 Medium Jul 1, 2023

Other 10up products

Distributor 3 Simple Local Avatars 3 Eight Day Week Print Workflow 2 Restricted Site Access 2 Safe SVG 2 Autoshare for Twitter 1 Microsoft Azure Storage for WordPress 1 safe_svg 1 Simple Page Ordering 1