https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-10705.htmlhttps://patchthecve.com/cve/CVE-2024-10705.htmlWed, 17 Jun 2026 06:56:14 +0000MEDIUM 5.4: The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.5 via the 'mpg_download_file_by_link' function. This makes it possible for authenticated attackers, with editor-level access and above, to make web reqhttps://patchthecve.com/cve/CVE-2024-10672.htmlhttps://patchthecve.com/cve/CVE-2024-10672.htmlWed, 17 Jun 2026 06:56:10 +0000LOW 2.7: The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the mpg_upsert_project_source_block() function in all versions up to, and including, 4.0.2. This makes it possible for authenticated attackers, with edithttps://patchthecve.com/cve/CVE-2024-47325.htmlhttps://patchthecve.com/cve/CVE-2024-47325.htmlWed, 17 Jun 2026 07:56:52 +0000HIGH 8.5: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects MPG: from n/a through <= 3.4.7.https://patchthecve.com/cve/CVE-2024-31301.htmlhttps://patchthecve.com/cve/CVE-2024-31301.htmlWed, 17 Jun 2026 07:28:09 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.0.https://patchthecve.com/cve/CVE-2024-27951.htmlhttps://patchthecve.com/cve/CVE-2024-27951.htmlWed, 17 Jun 2026 07:20:39 +0000CRITICAL 9.1: Unrestricted Upload of File with Dangerous Type vulnerability in Themeisle Multiple Page Generator Plugin – MPG allows Upload a Web Shell to a Web Server.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.0.https://patchthecve.com/cve/CVE-2024-30235.htmlhttps://patchthecve.com/cve/CVE-2024-30235.htmlWed, 17 Jun 2026 07:26:34 +0000MEDIUM 4.3: Missing Authorization vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.0.