33 matches found
WordPress MPG Plugin <= 3.4.0 is vulnerable to Remote Code Execution (RCE)
Software MPG Type Plugin Vulnerable versions = 3.4.0 Fixed in 3.4.1 OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2024-27951 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID e11792cbc705 Credits Majed Refaea Required privilege Editor...
CVE-2023-33927
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Multiple Page Generator Plugin – MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.3.19...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Multiple Page Generator Plugin – MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.3.19...
CVE-2023-33927
CVE-2023-33927 refers to WordPress plugin MPG (Multiple Page Generator by PortHas). Affected: MPG
CVE-2023-33927 WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.19 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Multiple Page Generator Plugin – MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.3.19...
CVE-2023-33927 WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.19 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Multiple Page Generator Plugin – MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.3.19...
WordPress MPG Plugin <= 2.8.12 is vulnerable to Cross Site Scripting (XSS)
Software MPG Type Plugin Vulnerable versions = 2.8.12 Fixed in 3.0.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 593885fb7e28 Credits Rafie Muhammad Patchstack Required privilege...
WordPress MPG Plugin <= 3.3.19 is vulnerable to SQL Injection
Software MPG Type Plugin Vulnerable versions = 3.3.19 Fixed in 3.3.20 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-33927 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID ad0baec3bee8 Credits LEE SE HYOUNG hackintoanetwork Required privilege...
WordPress MPG Plugin <= 3.3.17 is vulnerable to SQL Injection
Software MPG Type Plugin Vulnerable versions = 3.3.17 Fixed in 3.3.18 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2607 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 74726ab41bcc Credits Marco Wotschka Required privilege Administrator Published 16...
WordPress MPG Plugin <= 3.3.17 is vulnerable to Cross Site Request Forgery (CSRF)
Software MPG Type Plugin Vulnerable versions = 3.3.17 Fixed in 3.3.18 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-2608 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b81551ff093b Credits Marco Wotschka Required...
CVE-2022-47143
Cross-Site Request Forgery CSRF vulnerability in Themeisle Multiple Page Generator Plugin – MPG plugin = 3.3.9 versions...