Skip to content
OpenAdvisories

Vendor

mmetrodw

2 known vulnerabilities.

Products

MMX – Make Me Christmas 1 tPlayer 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2025-31401

    WordPress MMX – Make Me Christmas plugin <= 1.0.0 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in mmetrodw MMX – Make Me Christmas mmx-make-me-christmas allows Stored XSS.This issue affects MMX – Make Me Christmas: from n/a through <= 1.0.0.

    mmetrodw MMX – Make Me Christmas