Mvpthemes

7 CVEs across 10 Mvpthemes products. Browse Mvpthemes vulnerabilities, severities, and proof-of-concept exploits.

Mvpthemes products with known CVEs

ProductCVEs
Zoxpress2
Zoxpress - The All-In-One Wordpress News Theme2
Click Mag1
Click Mag - Viral Wordpress News Magazine/blog Theme1
Flex Mag - Responsive Wordpress News Theme1
Reviewer1
The League1
Zox News1
Zox News1
Zox News - Professional Wordpress News & Magazine Theme1
Mvpthemes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-66658High8.52026-08-13Subscriber SQL Injection in Reviewer <= 3.14.2 versions.
CVE-2026-25454Medium6.52026-03-25Missing Authorization vulnerability in MVPThemes The League the-league allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…
CVE-2024-13655High8.12025-03-07The Flex Mag - Responsive WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due…
CVE-2024-13656High8.12025-02-12The Click Mag - Viral WordPress News Magazine/Blog Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of se…
CVE-2024-13654High8.12025-02-12The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service…
CVE-2024-13653High8.82025-02-12The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation…
CVE-2024-13643High8.82025-02-11The Zox News - Professional WordPress News & Magazine Theme plugin for WordPress is vulnerable to unauthorized data modification. This vulnerability can lead t…
CVE-2024-11936High8.82025-01-26The Zox News theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on…