Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ThemeisleMultiple Page Generator*

10 matches found

CVE
CVE•added 2024/03/26 1:15 p.m.•55 views

CVE-2024-30235

Missing Authorization vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.0.

8.8CVSS5AI score0.00315EPSS
CVE
CVE•added 2024/04/03 12:15 p.m.•54 views

CVE-2024-27951

Unrestricted Upload of File with Dangerous Type vulnerability in Themeisle Multiple Page Generator Plugin – MPG allows Upload a Web Shell to a Web Server.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.0.

9.1CVSS9.2AI score0.00387EPSS
CVE
CVE•added 2024/04/12 1:15 p.m.•51 views

CVE-2024-31301

Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.0.

8.8CVSS9.2AI score0.00056EPSS
CVE
CVE•added 2025/01/26 7:15 a.m.•40 views

CVE-2024-10705

The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.5 via the 'mpg_download_file_by_link' function. This makes it possible for authenticated attackers, with editor-level access and above, to make web re...

8.1CVSS5.3AI score0.00017EPSS
CVE
CVE•added 2023/06/09 6:16 a.m.•39 views

CVE-2023-2607

The Multiple Page Generator Plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 3.3.17 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This mak...

7.2CVSS7.1AI score0.0025EPSS
CVE
CVE•added 2024/11/12 4:15 a.m.•39 views

CVE-2024-10672

The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the mpg_upsert_project_source_block() function in all versions up to, and including, 4.0.2. This makes it possible for authenticated attackers, with edi...

2.7CVSS3.5AI score0.00196EPSS
CVE
CVE•added 2023/10/31 3:15 p.m.•37 views

CVE-2023-33927

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Multiple Page Generator Plugin – MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.3.19.

9.8CVSS9.9AI score0.00441EPSS
CVE
CVE•added 2023/03/14 9:15 a.m.•36 views

CVE-2022-47143

Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG plugin <= 3.3.9 versions.

8.8CVSS6.5AI score0.0007EPSS
CVE
CVE•added 2023/05/17 2:15 a.m.•36 views

CVE-2023-2608

The Multiple Page Generator Plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 3.3.17 due to missing nonce verification on the projects_list function and insufficient escaping on...

4.3CVSS5.3AI score0.00054EPSS
CVE
CVE•added 2024/10/20 10:15 a.m.•35 views

CVE-2024-47325

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Multiple Page Generator Plugin – MPG allows SQL Injection.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.7.

8.8CVSS9.1AI score0.00271EPSS