EL
Product
ElasticPress
by 10up · last CVE Sep 11, 2026
4
CVEs
0
On KEV
5.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch

Add ElasticPress to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-62088
5.3
0%
Sep 11
WordPress ElasticPress plugin <= 5.3.4 - Sensitive Data Exposure vulnerability
Affected: through 5.3.4
CVE-2023-48753
5.3
0%
Jun 4
WordPress Restricted Site Access plugin <= 7.4.1 - IP Restriction Bypass vulnerability
Affected: 1.0 through 7.4.1
CVE-2024-35684
4.3
0%
Jun 8
WordPress ElasticPress plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 5.1.1
CVE-2021-4405
4.3
0%
Jul 1
The ElasticPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.3
Affected: through 3.5.3
Showing 4