2.7
Faible
CVE-2024-10672 The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to…
Description
The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the mpg_upsert_project_source_block() function in all versions up to, and including, 4.0.2. This makes it possible for authenticated attackers, with editor-level access and above, to delete limited files on the server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Multiple Page Generator Plugin – MPG 4.0 | premières → 4.0.2 | Pas de correctif indiqué |
Autres CVE de Multiple Page Generator Plugin – MPG
Les 12 CVE de Multiple Page Generator Plugin – MPG →
CVE-2024-10705
The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all…
5.4
Moyenne
CVE-2024-7424
The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to unauthorized modification of and access…
5.4
Moyenne
CVE-2024-47325
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle MPG…
8.5
Élevée
CVE-2024-31301
Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects…
5.4
Moyenne