Multiple Pages Generator By Porthas
by WordPress
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-47325 | Hig | 0.55 | 8.5 | 0.00 | Oct 20, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects MPG: from n/a through <= 3.4.7. | ||
| CVE-2026-85198 | Med | 0.42 | 6.5 | 0.00 | Sep 12, 2026 | The MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO plugin for WordPress is vulnerable to generic SQL Injection via URL Path in all versions up to, and including, 4.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient… | ||
| CVE-2026-97302 | Med | 0.34 | 5.3 | 0.00 | Sep 30, 2026 | Unauthenticated Sensitive Data Exposure in MPG <= 4.2.3 versions. | ||
| CVE-2024-7424 | Med | 0.28 | 5.4 | 0.00 | Nov 1, 2024 | The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to unauthorized modification of and access to data due to a missing capability check on several functions in all versions up to, and including, 4.0.1. This makes it possible for authenticated… |
- risk 0.55cvss 8.5epss 0.00
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects MPG: from n/a through <= 3.4.7.
- risk 0.42cvss 6.5epss 0.00
The MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO plugin for WordPress is vulnerable to generic SQL Injection via URL Path in all versions up to, and including, 4.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient…
- risk 0.34cvss 5.3epss 0.00
Unauthenticated Sensitive Data Exposure in MPG <= 4.2.3 versions.
- risk 0.28cvss 5.4epss 0.00
The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to unauthorized modification of and access to data due to a missing capability check on several functions in all versions up to, and including, 4.0.1. This makes it possible for authenticated…