Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: MadrasThemes Clear all filters
TI-2026-24876 CVE-2026-32348 · GHSA-2r7p-ccfc-8pxw

WordPress MAS Videos plugin <= 1.3.2 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in MadrasThemes MAS Videos masvideos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MAS Videos: from n/a through <= 1.3.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0026 Published 2026-03-13 No fix listed CWE-862
TI-2025-38942 CVE-2025-62753 · GHSA-vqvm-xqhr-4h5w

WordPress MAS Videos plugin <= 1.3.4 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in MadrasThemes MAS Videos masvideos allows PHP Local File Inclusion.This issue affects MAS Videos: fr…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0039 Published 2025-12-30 No fix listed CWE-98
TI-2024-11435 CVE-2024-12328 · GHSA-6qh7-3hr3-h8vg

MAS Elementor <= 1.1.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG

Priority LOW 28

The MAS Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0029 Published 2025-01-08 No fix listed CWE-79
TI-2024-32826 CVE-2024-49233 · GHSA-h9qf-c54c-rggj

WordPress MAS Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MadrasThemes MAS Elementor mas-addons-for-elementor allows DOM-Based XSS.This issue affects MAS Elementor: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0027 Published 2024-10-18 No fix listed CWE-79
TI-2024-08542 CVE-2024-9206 · GHSA-36r7-cwqj-8hrr

MAS Companies For WP Job Manager <= 1.0.13 - Reflected Cross-Site Scripting

Priority LOW 27

The MAS Companies For WP Job Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.0.…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00416 Published 2024-10-18 No fix listed CWE-79