Skip to content

Themelooks Mfolio Lite vulnerabilities

themelooks mfolio liteWordPress mFolio Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-318476.5 MediumApril 1, 2025
themelooks mfolio, mfolio lite +1 moremFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG FilesCVE-2024-93079.9 CriticalNovember 6, 2024