WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Mediavine Control Panel

Manage your ads, analytics and more with our lightweight plugin!

4Reported vulnerabilities
6.4Highest CVSS score
2.10.11Latest version
10,000+Active installs

What to do now

Update Mediavine Control Panel to 2.10.7 or later. 3 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 6.8.8 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2024-43218 Medium 6.4 0.3% 2.10.4 and earlier 2.10.5 August 9, 2024
CVE-2025-39556 Medium 5.3 0.5% 2.10.6 and earlier 2.10.7 April 16, 2025
CVE-2026-25424 Medium 4.3 0.3% 2.10.10 and earlier — July 22, 2026
CVE-2023-44259 Medium 4.3 0.2% 2.10.2 and earlier 2.10.3 September 27, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.