Read the docs

MPL-Publisher

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

MPL-Publisher records in CISA KEV

No MPL-Publisher vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mpl-publisher 2 records LOW

Records

2 records

TI-2025-28978 CVE-2025-46226 · GHSA-92h9-j7q8-mj88

WordPress MPL-Publisher plugin <= 2.18.0 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ferranfg MPL-Publisher mpl-publisher allows Stored XSS.This issue affects MPL-Publisher: from n/a through <= 2.18.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00276 Published 2025-04-22 No fix listed CWE-79
TI-2021-16710 CVE-2021-39343 · GHSA-2rvj-j9cf-63c3

MPL-Publisher – Self-publish your book & ebook <= 1.30.2 Authenticated Stored Cross-Site Scripting

Priority LOW 27

The MPL-Publisher WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/libs/PublisherController.php file which allowed…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01037 Published 2021-10-19 No fix listed CWE-79
Open these records in search →