Skip to content
OpenAdvisories

Product · themeisle

Multiple Page Generator Plugin – MPG

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-10705

    Multiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl

    The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.5 via the 'mpg_download_file_by_link' function. This makes it possible for authenticated attackers, with edito…

    themeisle Multiple Page Generator Plugin – MPG Web / CMS
  • Medium 5.4
    CVE-2024-7424

    Multiple Page Generator Plugin – MPG <= 4.0.1 - Missing Authorization

    The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to unauthorized modification of and access to data due to a missing capability check on several functions in all versions up to, and including, 4.0.1. This makes it possible for authe…

    themeisle Multiple Page Generator Plugin – MPG Web / CMS
  • Medium 5.4
    CVE-2024-31301

    WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.0.

    themeisle Multiple Page Generator Plugin – MPG
  • Medium 4.3
    CVE-2024-30235

    WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.0.

    themeisle Multiple Page Generator Plugin – MPG
  • Medium 5.3
    CVE-2024-1047

    ThemeIsle SDK <= Various Versions - Missing Authorization

    Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of data due to a missing capability check on the register_reference() function in various versions. This makes it possible for unauthenticated atta…

    themeisle Optimole rsocial RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator Web / CMS
  • Medium 4.3
    CVE-2022-47143

    WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.9 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG plugin <= 3.3.9 versions.

    themeisle Multiple Page Generator Plugin – MPG