Skip to content
OpenAdvisories

Vendor

Magazine3

23 known vulnerabilities.

Products

Schema & Structured Data for WP & AMP 11 Easy Table of Contents 3 WP Multilang 2 PWA for WP – Progressive Web Apps Made Simple 2 Core Web Vitals & PageSpeed Booster 1 Web Stories Enhancer – Level Up Your Web Stories 1 PWA for WP & AMP 1 Google Adsense & Banner Ads by AdsforWP 1 WP Multilang – Translation and Multilingual Plugin 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.2
    CVE-2026-96570

    Schema & Structured Data for WP & AMP <= 1.67 - Unauthenticated Stored Cross-Site Scripting via 'saswp_review_text' Parameter

    The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_review_text' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping. This makes…

    Magazine3 Schema & Structured Data for WP & AMP Web / CMS
  • High 8.8
    CVE-2026-97291

    WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability

    Contributor PHP Object Injection in Schema & Structured Data for WP & AMP <= 1.66 versions.

    Magazine3 Schema & Structured Data for WP & AMP
  • High 7.1
    CVE-2026-73342

    WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.

    Magazine3 WP Multilang
  • High 7.5
    CVE-2025-49307

    WordPress WP Multilang plugin <= 2.4.19 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magazine3 WP Multilang wp-multilang allows PHP Local File Inclusion.This issue affects WP Multilang: from n/a through <= 2.4.19.

    Magazine3 WP Multilang
  • High 8.8
    CVE-2021-4354

    PWA for WP & AMP <= 1.7.32 - Arbitrary File Upload

    The PWA for WP & AMP for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the pwaforwp_splashscreen_uploader function in versions up to, and including, 1.7.32. This makes it possible for authenticated attackers to uploa…

    Magazine3 PWA for WP – Progressive Web Apps Made Simple