Mfolio Lite
Approved changes feed: RSS · Atom
cpe:2.3:a:themelooks:mfolio_lite:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Themelooks (e8868196-b475-524f-a03e-f0b237b30f62) |
|---|---|
| Product | Mfolio Lite (443466a3-c0c1-53bf-aae4-da26c1dc0934) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-31847 |
vulnerable | 2026-06-08 07:18:58.665835 |
WordPress mFolio Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelooks mFolio Lite mfolio-lite allows DOM-Based XSS.This issue affects mFolio Lite: from n/a through <= 1.2.3.
Published: 2025-04-01T14:51:58.225Z
Updated: 2026-04-28T16:12:14.278Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9307 |
vulnerable | 2026-06-08 07:00:27.098783 |
mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files
CRITICAL (9.9)
The mFolio Lite plugin for WordPress is vulnerable to file uploads due to a missing capability check in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file or upload arbitrary EXE files on the affected site's server which may make remote code execution possible if the attacker can also gain access to run the .exe file, or trick a site visitor into downloading and running the .exe file.
Published: 2024-11-06T06:43:28.628Z
Updated: 2026-04-08T16:47:09.771Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.