Skip to content
OpenAdvisories

Product · themeisle

Multiple Page Generator Plugin – MPG

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.7
    CVE-2024-10672

    Multiple Page Generator Plugin – MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File Deletion

    The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the mpg_upsert_project_source_block() function in all versions up to, and including, 4.0.2. This makes it possib…

    themeisle Multiple Page Generator Plugin – MPG Web / CMS
  • Low 3.1
    CVE-2023-2608

    Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection

    The Multiple Page Generator Plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 3.3.17 due to missing nonce verification on the projects_li…

    themeisle Multiple Page Generator Plugin – MPG Web / CMS