Themelooks Mfolio vulnerabilities

• themelooks mfolio lite WordPress mFolio Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-31847 6.5 MediumApril 1, 2025
• themelooks mfolio, mfolio lite +1 more mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files CVE-2024-9307 9.9 CriticalNovember 6, 2024