Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: MPL-Publisher Component: Mpl-publisher Clear all filters
TI-2025-28978 CVE-2025-46226 · GHSA-92h9-j7q8-mj88

WordPress MPL-Publisher plugin <= 2.18.0 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ferranfg MPL-Publisher mpl-publisher allows Stored XSS.This issue affects MPL-Publisher: from n/a through <= 2.18.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00276 Published 2025-04-22 No fix listed CWE-79
TI-2021-16710 CVE-2021-39343 · GHSA-2rvj-j9cf-63c3

MPL-Publisher – Self-publish your book & ebook <= 1.30.2 Authenticated Stored Cross-Site Scripting

Priority LOW 27

The MPL-Publisher WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/libs/PublisherController.php file which allowed…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01037 Published 2021-10-19 No fix listed CWE-79