Skip to content
OpenAdvisories

Vendor

themelooks

14 known vulnerabilities.

Products

Enter Addons – Ultimate Template Builder for Elementor 5 Enter Addons 5 mFolio Lite 2 FoodBook Lite – Online Food Ordering System 1 FoodBook 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2024-9307

    mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files

    The mFolio Lite plugin for WordPress is vulnerable to file uploads due to a missing capability check in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web s…

    themelooks mFolio Lite Web / CMS