5.4
Moyenne
CVE-2024-10705 The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all…
Description
The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.5 via the 'mpg_download_file_by_link' function. This makes it possible for authenticated attackers, with editor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Multiple Page Generator Plugin – MPG 4.0 | premières → 4.0.5 | Pas de correctif indiqué |
Autres CVE de Multiple Page Generator Plugin – MPG
Les 12 CVE de Multiple Page Generator Plugin – MPG →
CVE-2024-10672
The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to…
2.7
Faible
CVE-2024-7424
The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to unauthorized modification of and access…
5.4
Moyenne
CVE-2024-47325
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle MPG…
8.5
Élevée
CVE-2024-31301
Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects…
5.4
Moyenne