Known vulnerabilities in 10up Distributor
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-111631 | Distributor before 2.3.2 contains a missing authorization vulnerability that allows Contributor-level users to invoke… | 5.3 Medium | Oct 16, 2026 |
| CVE-2026-111628 | 10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to… | 2.3 Low | Oct 16, 2026 |
| CVE-2026-111625 | 10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax_push() that allows… | 5.3 Medium | Oct 16, 2026 |