MVPThemes vulnerabilities
9 published CVEs name MVPThemes among the affected products.
- 9Published CVEs9 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical7 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-66648
WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerability
MVPThemes · Jawn
Critical9.8 - CVE-2026-66658
WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability
MVPThemes · Reviewer
High8.5 - CVE-2026-25454
WordPress The League theme <= 4.4.1 - Broken Access Control vulnerability
MVPThemes · The League
Medium6.5 - CVE-2024-13655
Flex Mag - Responsive WordPress News Theme <= 3.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion
MVPThemes · Flex Mag - Responsive WordPress News Theme
High8.1 - CVE-2024-13654
ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion
MVPThemes · ZoxPress - The All-In-One WordPress News Theme
High8.1 - CVE-2024-13656
Click Mag - Viral WordPress News Magazine/Blog Theme <= 3.6.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion
MVPThemes · Click Mag - Viral WordPress News Magazine/Blog Theme
High8.1 - CVE-2024-13653
ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
MVPThemes · ZoxPress - The All-In-One WordPress News Theme
High8.8 - CVE-2024-13643
Zox News <= 3.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Modification
MVPThemes · Zox News - Professional WordPress News & Magazine Theme
High8.8 - CVE-2024-11936
Zox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
MVPThemes · Zox News
High8.8