9.1
Critical
CVE-2024-27951 Unrestricted Upload of File with Dangerous Type vulnerability in Themeisle Multiple Page Generator Plugin – MPG allows…
Description
Unrestricted Upload of File with Dangerous Type vulnerability in Themeisle Multiple Page Generator Plugin – MPG allows Upload a Web Shell to a Web Server.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Multiple Page Generator Plugin – MPG 3.4 | earliest → 3.4.0 | No fix stated |
| multiple_page_generator 3.4 | earliest → 3.4.0 | No fix stated |
Other CVEs of Multiple Page Generator Plugin – MPG
The 12 CVEs of Multiple Page Generator Plugin – MPG →
CVE-2024-10705
The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all…
5.4
Medium
CVE-2024-10672
The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to…
2.7
Low
CVE-2024-7424
The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to unauthorized modification of and access…
5.4
Medium
CVE-2024-47325
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle MPG…
8.5
High