Read the docs

MVPThemes

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

MVPThemes records in CISA KEV

No MVPThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Zoxpress 2 records MEDIUM Click Mag 1 record LOW Zox News 1 record MEDIUM

Records

10 records

TI-2024-12692 CVE-2024-13653 · GHSA-q7vg-367c-7g5v

Missing authorization in MVPThemes ZoxPress - The All-In-One WordPress News Theme

Priority MEDIUM 41

The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backup_options' an…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00519 Published 2025-02-12 No fix listed CWE-862
TI-2024-11073 CVE-2024-11936 · GHSA-44w3-4x9p-xmff

Zox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Priority MEDIUM 40

The Zox News theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backup_options' and 'restore_options' function in all ve…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00384 Published 2025-01-26 No fix listed CWE-862
TI-2024-12695 CVE-2024-13656 · GHSA-gfmh-r8qh-w25v

Missing authorization in MVPThemes Click Mag - Viral WordPress News Magazine/Blog Theme

Priority LOW 36

The Click Mag - Viral WordPress News Magazine/Blog Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanel_of_aj…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00461 Published 2025-02-12 No fix listed CWE-862
TI-2024-12694 CVE-2024-13655 · GHSA-fqx4-gh4h-f8q5

Missing authorization in MVPThemes Flex Mag - Responsive WordPress News Theme

Priority LOW 35

The Flex Mag - Responsive WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanel_of_ajax_callbac…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00337 Published 2025-03-07 No fix listed CWE-862
TI-2024-12693 CVE-2024-13654 · GHSA-gvc6-5w8m-9mrj

Missing authorization in MVPThemes ZoxPress - The All-In-One WordPress News Theme

Priority LOW 35

The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'reset_options' func…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00416 Published 2025-02-12 No fix listed CWE-862
TI-2026-20566 CVE-2026-25454 · GHSA-w6x8-mjqg-7pwv

WordPress The League theme <= 4.4.1 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in MVPThemes The League the-league allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The League: from n/a through <= 4.4.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00342 Published 2026-03-25 No fix listed CWE-862
Open these records in search →