Read the docs

themeisle

Records136All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high32CVSS 7.0–8.9

Exploited now

themeisle records in CISA KEV

No themeisle vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Orbit Fox 15 records LOW Multiple Page Generator 10 records MEDIUM Otter Blocks 10 records LOW Rss Aggregator By Feedzy 9 records MEDIUM Visualizer 7 records HIGH Product Addons & Fields For Woocommerce 4 records MEDIUM Cloud Templates & Patterns Collection 1 record LOW Google Maps Plugin By Intergeo 1 record LOW

Records

10 records in Multiple Page Generator · all components

TI-2023-16799 CVE-2023-33927 · GHSA-5vqr-qc3r-pv4r

WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.19 is vulnerable to SQL Injection

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Multiple Page Generator Plugin – MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue aff…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0069 Published 2023-10-31 No fix listed CWE-89
TI-2024-18554 CVE-2024-27951 · GHSA-gw4j-wq88-96mq

WordPress Multiple Page Generator Plugin <= 3.4.0 - Auth. Remote Code Execution (RCE) vulnerability

Priority MEDIUM 42

Unrestricted Upload of File with Dangerous Type vulnerability in Themeisle Multiple Page Generator Plugin – MPG allows Upload a Web Shell to a Web Server.This issue affects Multiple Page Generator Plugin – MPG: from n/a…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00603 Published 2024-04-03 No fix listed CWE-434
TI-2024-31643 CVE-2024-47325 · GHSA-m3w3-qr42-6xp4

WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.7 - SQL Injection vulnerability

Priority LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects MPG: from n/a through <= 3.4…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00468 Published 2024-10-20 No fix listed CWE-89
TI-2024-09920 CVE-2024-10705 · GHSA-c6x3-v7hq-94wf

Multiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl

Priority LOW 35

The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.5 via the 'mpg_download_file_by_link' function.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00347 Published 2025-01-26 No fix listed CWE-918
TI-2023-02437 CVE-2023-2607 · GHSA-rmp7-vj7j-52fx

Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection

Priority LOW 35

The Multiple Page Generator Plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 3.3.17 due to insufficient escaping on the user supplied p…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00841 Published 2023-06-09 No fix listed CWE-89
TI-2023-02438 CVE-2023-2608 · GHSA-wg5f-8xwf-672g

Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection

Priority LOW 20

The Multiple Page Generator Plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 3.3.17 due to missin…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00364 Published 2023-05-17 No fix listed CWE-352
TI-2024-09890 CVE-2024-10672 · GHSA-rc79-c9r3-hhj6

Multiple Page Generator Plugin – MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File Deletion

Priority LOW 14

The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the mpg_upsert_project_source_block() function in all versions up to, and…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00498 Published 2024-11-12 No fix listed CWE-73
Open these records in search →