Mpg (Unknown) - vulnerabilities (CVEs)

3 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-07. Vendor: Unknown.

CVEs of Mpg

• CVE-2026-104953 - CVSS 6.8 (medium), 2026-10-07: The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users…
• CVE-2026-103293 - CVSS 6.8 (medium), 2026-10-03: The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a…
• CVE-2026-13726 - CVSS 7.1 (high), 2026-07-27: The MPG WordPress plugin before 4.1.8 does not sanitise and escape a parameter before reflecting it back in the response, allowing unauthenticated attackers…