MVPThemes vulnerabilities
We track 6 vulnerabilities in MVPThemes products across 7 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on March 7, 2025.
Latest MVPThemes vulnerabilities
- 8.1 High severity
Flex Mag - Responsive WordPress News Theme: Missing Authorization
The Flex Mag - Responsive WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanel_of_ajax_callback() function in all versions up to, and
- 8.1 High severity
Click Mag - Viral WordPress News Magazine/Blog…: Missing Authorization
The Click Mag - Viral WordPress News Magazine/Blog Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanel_of_ajax_callback() function in all versions u
- 8.1 High severity
ZoxPress - The All-In-One WordPress News Theme: Missing Authorization
The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'reset_options' function in all versions up to, and includin
- 8.8 High severity
ZoxPress - The All-In-One WordPress News Theme: Missing Authorization
The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backup_options' and 'restore_options' functions in all ver
- 8.8 High severity
Zox News - Professional WordPress News &…: Missing Authorization
The Zox News - Professional WordPress News & Magazine Theme plugin for WordPress is vulnerable to unauthorized data modification. This vulnerability can lead to privilege escalation and denial of service conditions due to missing capability checks on the backu
- 8.8 High severity
Zox News: Missing Authorization
The Zox News theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backup_options' and 'restore_options' function in all versions up to, and including, 3.16.0. Thi