8.5
High
CVE-2024-47325 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle MPG…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects MPG: from n/a through <= 3.4.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Multiple Page Generator Plugin – MPG 3.4 | earliest → 3.4.7 | No fix stated |
| MPG 3.4 | earliest → 3.4.7 | No fix stated |
Other CVEs of Multiple Page Generator Plugin – MPG
The 12 CVEs of Multiple Page Generator Plugin – MPG →
CVE-2024-10705
The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all…
5.4
Medium
CVE-2024-10672
The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to…
2.7
Low
CVE-2024-7424
The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to unauthorized modification of and access…
5.4
Medium
CVE-2024-31301
Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects…
5.4
Medium