Multiple Page Generator Security Vulnerabilities and Issues — Multiple Page Generator CVE List

Lucene search

ThemeisleMultiple Page Generator

4 matches found

CVE•added 2023/06/09 6:16 a.m.•39 views

CVE-2023-2607

The Multiple Page Generator Plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 3.3.17 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This mak...

7.2CVSS7.1AI score0.0025EPSS

CVE•added 2023/10/31 3:15 p.m.•37 views

CVE-2023-33927

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Multiple Page Generator Plugin – MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.3.19.

9.8CVSS9.9AI score0.00441EPSS

CVE•added 2023/03/14 9:15 a.m.•36 views

CVE-2022-47143

Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG plugin

8.8CVSS6.5AI score0.0007EPSS

CVE•added 2023/05/17 2:15 a.m.•36 views

CVE-2023-2608

The Multiple Page Generator Plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 3.3.17 due to missing nonce verification on the projects_list function and insufficient escaping on...

4.3CVSS5.3AI score0.00054EPSS