Advisories · Technology

10up ElasticPress.

Every CVE that names 10up ElasticPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-62088 CVE record

CVSS 5.3 Medium

WordPress ElasticPress plugin <= 5.3.4 - Sensitive Data Exposure vulnerability
- 10up ElasticPress
- Information disclosure
Not analysed yet 11 Sept 2026
CVE-2024-35684 CVE record

CVSS 4.3 Medium

WordPress ElasticPress plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability
- 10up ElasticPress
- Cross-site request forgery (CSRF)
Not analysed yet 8 Jun 2024
CVE-2021-4405 CVE record

CVSS 4.3 Medium

ElasticPress <= 3.5.3 - Cross-Site Request Forgery Bypass
- 10up ElasticPress
- Cross-site request forgery (CSRF)
Not analysed yet 1 Jul 2023