Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Meks — Vulnerabilities & Security Advisories 9

Browse all 9 CVE security advisories affecting Meks. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Meks is a WordPress theme provider primarily used for building business and portfolio websites. Historically, the platform has been susceptible to multiple remote code execution (RCE) vulnerabilities, cross-site scripting (XSS) attacks, and privilege escalation flaws. These weaknesses often stem from insufficient input validation and improper access controls. The company has addressed several critical issues, but its cumulative CVE count of 9 indicates a pattern of security challenges that have potentially exposed users to unauthorized access and data compromise. While recent updates have improved security posture, the historical vulnerabilities highlight the importance of maintaining current installations and applying patches promptly.

CVE ID Title CVSS Severity Published
CVE-2025-68083 WordPress Meks Quick Plugin Disabler plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability — Meks Quick Plugin Disabler CWE-352 5.4 Medium 2025-12-16
CVE-2025-49855 WordPress Meks Flexible Shortcodes plugin <= 1.3.7 - Cross Site Scripting (XSS) Vulnerability — Meks Flexible Shortcodes CWE-79 6.5 Medium 2025-06-17
CVE-2025-47621 WordPress Meks Flexible Shortcodes plugin <= 1.3.6 - Cross Site Scripting (XSS) Vulnerability — Meks Flexible Shortcodes CWE-79 6.5 Medium 2025-05-07
CVE-2024-38733 WordPress Meks Video Importer plugin <= 1.0.12 - Broken Access Control vulnerability — Meks Video Importer CWE-862 5.4 Medium 2024-11-01
CVE-2024-37548 WordPress Meks Easy Ads Widget plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability — Meks Easy Ads Widget CWE-79 5.9 Medium 2024-07-21
CVE-2024-37958 WordPress Meks Smart Author Widget plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability — Meks Smart Author Widget CWE-79 6.5 Medium 2024-07-20
CVE-2024-33693 WordPress Meks Smart Social Widget plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability — Meks Smart Social Widget CWE-79 5.9 Medium 2024-04-26
CVE-2024-33694 WordPress Meks ThemeForest Smart Widget plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability — Meks ThemeForest Smart Widget CWE-79 5.9 Medium 2024-04-26
CVE-2023-25989 Cross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks — Meks Video Importer CWE-352 4.3 Medium 2023-10-03

This page lists every published CVE security advisory associated with Meks. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.