MVPThemes vulnerabilities

CVEs per yearBy the year they were published

1. 20256
2. 20263

Newest CVEs

• CVE-2026-66648

  WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerability

  MVPThemes · Jawn

  Critical9.8
• CVE-2026-66658

  WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability

  MVPThemes · Reviewer

  High8.5
• CVE-2026-25454

  WordPress The League theme <= 4.4.1 - Broken Access Control vulnerability

  MVPThemes · The League

  Medium6.5
• CVE-2024-13655

  Flex Mag - Responsive WordPress News Theme <= 3.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion

  MVPThemes · Flex Mag - Responsive WordPress News Theme

  High8.1
• CVE-2024-13654

  ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion

  MVPThemes · ZoxPress - The All-In-One WordPress News Theme

  High8.1
• CVE-2024-13656

  Click Mag - Viral WordPress News Magazine/Blog Theme <= 3.6.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion

  MVPThemes · Click Mag - Viral WordPress News Magazine/Blog Theme

  High8.1
• CVE-2024-13653

  ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

  MVPThemes · ZoxPress - The All-In-One WordPress News Theme

  High8.8
• CVE-2024-13643

  Zox News <= 3.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Modification

  MVPThemes · Zox News - Professional WordPress News & Magazine Theme

  High8.8
• CVE-2024-11936

  Zox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

  MVPThemes · Zox News

  High8.8