Magazine3 vulnerabilities
We track 3 vulnerabilities in Magazine3 products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.
Latest Magazine3 vulnerabilities
- 7.2 High severity
Schema & Structured Data for WP & AMP: Improper Neutralization of Input During Web Page Generation
The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_review_text' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping. This makes
- 7.5 High severity
WP Multilang: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magazine3 WP Multilang wp-multilang allows PHP Local File Inclusion.This issue affects WP Multilang: from n/a through <= 2.4.19.
- 8.8 High severity
AMP for WP – Accelerated Mobile Pages: Cross-Site Request Forgery
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.99.1. This is due to missing or incorrect nonce validation on the 'proxy' function. This makes it possible for