Vulnerabilities in MVPThemes
9 resultsVexday analysis
MVPThemes apresenta um portfólio pequeno de 7 vulnerabilidades, nenhuma em exploração ativa conhecida, sem casos críticos registrados. A fraqueza predominante é falta de autorização apropriada (CWE-862), indicando problemas de controle de acesso que demandam revisão, embora o risco atual seja moderado pela ausência de atividade de ataque.
CVE-2024-13643HIGHZox News <= 3.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options ModificationEPSS 0.6%CVE-2024-13653HIGHZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options UpdateEPSS 0.5%CVE-2024-13656HIGHClick Mag - Viral WordPress News Magazine/Blog Theme <= 3.6.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options DeletionEPSS 0.5%CVE-2024-13654HIGHZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options DeletionEPSS 0.4%CVE-2024-11936HIGHZox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options UpdateEPSS 0.4%CVE-2026-66658HIGHWordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerabilityEPSS 0.3%CVE-2024-13655HIGHFlex Mag - Responsive WordPress News Theme <= 3.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option DeletionEPSS 0.3%CVE-2026-25454MEDIUMWordPress The League theme <= 4.4.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-66648CRITICALWordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerabilityEPSS 0.3%