Vulnerabilidades de MVPThemes
CVEs publicadas que afetam produtos de MVPThemes: 4 registro(s), com severidade, exploração e correções.
CVE-2026-66648
Crítica · 9.8
CWE-266 24/08/2026
WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.
CVE-2026-66658
Alta · 8.5
CWE-89 13/08/2026
WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability
Subscriber SQL Injection in Reviewer <= 3.14.2 versions.
CVE-2026-65479
Média · 5.4
CWE-862 23/07/2026
WordPress Reviewer plugin <= 3.14.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.
CVE-2026-25454
Média · 6.5
CWE-862 25/03/2026
WordPress The League theme <= 4.4.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in MVPThemes The League the-league allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The League: from n/a through <= 4.4.1.