Skip to content
OpenAdvisories

Vendor

MVP Themes

10 known vulnerabilities.

Products

ZoxPress - The All-In-One WordPress News Theme 2 Reviewer 2 The League 1 Click Mag - Viral WordPress News Magazine/Blog Theme 1 Zox News - Professional WordPress News & Magazine Theme 1 Flex Mag - Responsive WordPress News Theme 1 Jawn 1 Zox News 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.5
    CVE-2026-66658

    WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability

    Subscriber SQL Injection in Reviewer <= 3.14.2 versions.

    MVP Themes Reviewer
  • High 8.1
    CVE-2024-13655

    Flex Mag - Responsive WordPress News Theme <= 3.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion

    The Flex Mag - Responsive WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanel_of_ajax_callback() function in all versions up to, and…

    MVP Themes Flex Mag - Responsive WordPress News Theme Web / CMS
  • High 8.1
    CVE-2024-13654

    ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion

    The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'reset_options' function in all versions up to, and includi…

    MVP Themes ZoxPress - The All-In-One WordPress News Theme Web / CMS
  • High 8.1
    CVE-2024-13656

    Click Mag - Viral WordPress News Magazine/Blog Theme <= 3.6.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion

    The Click Mag - Viral WordPress News Magazine/Blog Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanel_of_ajax_callback() function in all versions …

    MVP Themes Click Mag - Viral WordPress News Magazine/Blog Theme Web / CMS
  • High 8.8
    CVE-2024-13653

    ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

    The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backup_options' and 'restore_options' functions in all ve…

    MVP Themes ZoxPress - The All-In-One WordPress News Theme Web / CMS
  • High 8.8
    CVE-2024-13643

    Zox News <= 3.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Modification

    The Zox News - Professional WordPress News & Magazine Theme plugin for WordPress is vulnerable to unauthorized data modification. This vulnerability can lead to privilege escalation and denial of service conditions due to missing capability checks on the back…

    MVP Themes Zox News - Professional WordPress News & Magazine Theme Web / CMS
  • High 8.8
    CVE-2024-11936

    Zox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

    The Zox News theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backup_options' and 'restore_options' function in all versions up to, and including, 3.16.0. Th…

    MVP Themes Zox News Web / CMS