CVE Tools

Multiple Page Generator Plugin – Mpg

11 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Multiple Page Generator Plugin – Mpg, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Multiple Page Generator Plugin – Mpg CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Multiple Page Generator Plugin – Mpg CVEs per month
MonthCVEs
2024-112
2024-120
2025-011
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-100

Severity

How the 11 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical19%
  • High218%
  • Medium655%
  • Low218%

Latest CVEs

The 11 most recently published vulnerabilities affecting Multiple Page Generator Plugin – Mpg.

  1. CVE-2024-10705Multiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl5.4
  2. CVE-2024-10672Multiple Page Generator Plugin – MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File Deletion2.7
  3. CVE-2024-7424Multiple Page Generator Plugin – MPG <= 4.0.1 - Missing Authorization5.4
  4. CVE-2024-31301WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) vulnerability5.4
  5. CVE-2024-27951WordPress Multiple Page Generator Plugin <= 3.4.0 - Auth. Remote Code Execution (RCE) vulnerability9.1
  6. CVE-2024-30235WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Broken Access Control vulnerability4.3
  7. CVE-2024-1047ThemeIsle SDK <= Various Versions - Missing Authorization5.3
  8. CVE-2023-33927WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.19 is vulnerable to SQL Injection7.6
  9. CVE-2023-2607Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection7.2
  10. CVE-2023-2608Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection3.1
  11. CVE-2022-47143WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.9 is vulnerable to Cross Site Request Forgery (CSRF)4.3

Product grouping is registry-driven, with AI assist and human review. How it works