Advisories · Technology
themeisle Multiple Page Generator Plugin – MPG.
Every CVE that names themeisle Multiple Page Generator Plugin – MPG among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
Multiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl
- themeisle Multiple Page Generator Plugin – MPG
- Server-side request forgery (SSRF)
- CVSS 2.7 Low
Multiple Page Generator Plugin – MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File Deletion
- themeisle Multiple Page Generator Plugin – MPG
- Path traversal
- CVSS 5.4 Medium
Multiple Page Generator Plugin – MPG <= 4.0.1 - Missing Authorization
- themeisle Multiple Page Generator Plugin – MPG
- Broken access control
- CVSS 5.4 Medium
WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) vulnerability
- Themeisle Multiple Page Generator Plugin – MPG
- Cross-site request forgery (CSRF)
- CVSS 9.1 CriticalCritical · CVSS 9+
WordPress Multiple Page Generator Plugin <= 3.4.0 - Auth. Remote Code Execution (RCE) vulnerability
- Themeisle Multiple Page Generator Plugin – MPG
- Unrestricted file upload
- CVSS 4.3 Medium
WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Broken Access Control vulnerability
- Themeisle Multiple Page Generator Plugin – MPG
- Broken access control
- CVSS 5.3 Medium
ThemeIsle SDK <= Various Versions - Missing Authorization
- Menu Icons by ThemeIsle
- themeisle Starter Sites & Templates by Neve
- Broken access control
- CVSS 7.6 High
WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.19 is vulnerable to SQL Injection
- Themeisle Multiple Page Generator Plugin – MPG
- SQL injection
- CVSS 7.2 High
Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection
- themeisle Multiple Page Generator Plugin – MPG
- SQL injection
- CVSS 3.1 Low
Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection
- themeisle Multiple Page Generator Plugin – MPG
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.9 is vulnerable to Cross Site Request Forgery (CSRF)
- Themeisle Multiple Page Generator Plugin – MPG
- Cross-site request forgery (CSRF)