Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: themeisle Component: Multiple Page Generator Clear all filters
TI-2024-09920 CVE-2024-10705 · GHSA-c6x3-v7hq-94wf

Multiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl

Priority LOW 35

The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.5 via the 'mpg_download_file_by_link' function.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00347 Published 2025-01-26 No fix listed CWE-918
TI-2024-09890 CVE-2024-10672 · GHSA-rc79-c9r3-hhj6

Multiple Page Generator Plugin – MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File Deletion

Priority LOW 14

The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the mpg_upsert_project_source_block() function in all versions up to, and…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00498 Published 2024-11-12 No fix listed CWE-73
TI-2024-31643 CVE-2024-47325 · GHSA-m3w3-qr42-6xp4

WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.7 - SQL Injection vulnerability

Priority LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects MPG: from n/a through <= 3.4…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00468 Published 2024-10-20 No fix listed CWE-89
TI-2024-18554 CVE-2024-27951 · GHSA-gw4j-wq88-96mq

WordPress Multiple Page Generator Plugin <= 3.4.0 - Auth. Remote Code Execution (RCE) vulnerability

Priority MEDIUM 42

Unrestricted Upload of File with Dangerous Type vulnerability in Themeisle Multiple Page Generator Plugin – MPG allows Upload a Web Shell to a Web Server.This issue affects Multiple Page Generator Plugin – MPG: from n/a…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00603 Published 2024-04-03 No fix listed CWE-434
TI-2023-16799 CVE-2023-33927 · GHSA-5vqr-qc3r-pv4r

WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.19 is vulnerable to SQL Injection

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Multiple Page Generator Plugin – MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue aff…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0069 Published 2023-10-31 No fix listed CWE-89
TI-2023-02437 CVE-2023-2607 · GHSA-rmp7-vj7j-52fx

Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection

Priority LOW 35

The Multiple Page Generator Plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 3.3.17 due to insufficient escaping on the user supplied p…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00841 Published 2023-06-09 No fix listed CWE-89
TI-2023-02438 CVE-2023-2608 · GHSA-wg5f-8xwf-672g

Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection

Priority LOW 20

The Multiple Page Generator Plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 3.3.17 due to missin…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00364 Published 2023-05-17 No fix listed CWE-352