Mekshq
9 CVEs across 15 Mekshq products. Browse Mekshq vulnerabilities, severities, and proof-of-concept exploits.
Mekshq products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-9206 | Medium | 6.4 | 2025-10-03 | The Meks Easy Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title field in all version up to, and including, 2.1.4. This… |
CVE-2024-37548 | Medium | 5.9 | 2024-07-21 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Meks Meks Easy Ads Widget allows Stored XSS.This i… |
CVE-2024-37958 | Medium | 6.5 | 2024-07-20 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Meks Meks Smart Author Widget allows Stored XSS.Th… |
CVE-2024-6599 | Medium | 4.3 | 2024-07-18 | The Meks Video Importer plugin for WordPress is vulnerable to unauthorized API key modification due to a missing capability check on the ajax_save_settings fun… |
CVE-2024-0664 | Medium | 4.4 | 2024-01-27 | The Meks Smart Social Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Meks Smart Social Widget in all versions up to, and incl… |
CVE-2023-25989 | Medium | 4.3 | 2023-10-03 | Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Play… |
CVE-2022-4562 | Medium | 5.4 | 2023-02-13 | The Meks Flexible Shortcodes WordPress plugin before 1.3.5 does not validate and escape some of its shortcode attributes before outputting them back in the pag… |
CVE-2022-2574 | Medium | 4.8 | 2022-10-17 | The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admi… |
CVE-2021-24958 | Medium | 5.4 | 2022-03-14 | The Meks Easy Photo Feed Widget WordPress plugin before 1.2.4 does not have capability and CSRF checks in the meks_save_business_selected_account AJAX action… |