CVE-2026-24552

The vulnerability exists in the Create by Mediavine plugin versions 2.5.3 and earlier, allowing for SQL injection attacks that could enable unauthorized access to sensitive data or manipulation of the database. Organizations using this plugin should prioritize patching or upgrading to mitigate the risk of exploitation, as the high severity rating indicates a significant potential impact on data integrity and confidentiality.