Themelooks Mfolio Lite
2 CVEs affecting Themelooks Mfolio Lite. Latest disclosed: 2025-04-01. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-9307 | Critical | 9.9 | 2024-11-06 | The mFolio Lite plugin for WordPress is vulnerable to file uploads due to a missing capability check in all versions up to, and including, 1.2.1. This makes it… |
CVE-2025-31847 | Medium | 6.5 | 2025-04-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelooks mFolio Lite mfolio-lite allows DOM-Based XSS.T… |