Filtered by vendor Themeisle
Subscriptions
Filtered by product Mpg
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-97302 | 2 Themeisle, Wordpress-extensions | 2 Mpg, Mpg | 2026-10-25 | 5.3 Medium |
| Unauthenticated Sensitive Data Exposure in MPG <= 4.2.3 versions. | ||||
| CVE-2026-13726 | 2 Themeisle, Wordpress | 2 Mpg, Wordpress | 2026-07-28 | 7.1 High |
| The MPG WordPress plugin before 4.1.8 does not sanitise and escape a parameter before reflecting it back in the response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against a victim who is induced to send a crafted request. | ||||
Page 1 of 1.