MVPThemes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting MVPThemes products: 4 record(s), with severity, exploitation and fixes.

Reviewer 2 The League 1 Jawn 1

Exploited only (KEV) →

CVE-2026-66648 Critical · 9.8 CWE-266 Aug 24, 2026

WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.

CVE-2026-66658 High · 8.5 CWE-89 Aug 13, 2026

WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability

Subscriber SQL Injection in Reviewer <= 3.14.2 versions.

CVE-2026-65479 Medium · 5.4 CWE-862 Jul 23, 2026

WordPress Reviewer plugin <= 3.14.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.

CVE-2026-25454 Medium · 6.5 CWE-862 Mar 25, 2026

WordPress The League theme <= 4.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in MVPThemes The League the-league allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The League: from n/a through <= 4.4.1.