Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Multiple Page Generator Plugin – MPG — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Multiple Page Generator Plugin – MPG, with AI-generated Chinese analysis, references, and POCs.

Vendor: Themeisle

CVE IDTitleCVSSSeverityPublished
CVE-2024-10705 Multiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl CWE-918 5.4 Medium2025-01-26
CVE-2024-10672 Multiple Page Generator Plugin – MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File Deletion CWE-73 2.7 Low2024-11-12
CVE-2024-7424 Multiple Page Generator Plugin – MPG <= 4.0.1 - Missing Authorization CWE-284 5.4 Medium2024-11-01
CVE-2024-31301 WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 5.4 Medium2024-04-12
CVE-2024-27951 WordPress Multiple Page Generator Plugin <= 3.4.0 - Auth. Remote Code Execution (RCE) vulnerability CWE-434 9.1 Critical2024-04-03
CVE-2024-30235 WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Broken Access Control vulnerability CWE-862 4.3 Medium2024-03-26
CVE-2023-33927 WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.19 is vulnerable to SQL Injection CWE-89 9.8 -2023-10-31
CVE-2023-2607 Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection CWE-89 7.2 High2023-06-09
CVE-2023-2608 Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection CWE-352 3.1 Low2023-05-17
CVE-2022-47143 WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.9 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 4.3 Medium2023-03-14

All 10 known CVE vulnerabilities affecting Multiple Page Generator Plugin – MPG with full Chinese analysis, references, and POCs where available.