Plugin icon

MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO

multiple-pages-generator-by-porthas

Vulnerabilities:

13

Last Updated:

July 19, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-07-06
Title
Multiple Page Generator Plugin – MPG < 4.1.8 - Reflected XSS via mpg_shortcode
Fixed in
Fixed in 4.1.8
CVSS
7.1 (high)
Published
2025-01-25
Title
Multiple Page Generator Plugin – MPG < 4.0.6 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl
Fixed in
Fixed in 4.0.6
CVSS
5.4 (medium)
Published
2024-11-11
Title
Multiple Page Generator Plugin – MPG < 4.0.3 - Authenticated (Editor+) Directory Traversal to Limited File Deletion
Fixed in
Fixed in 4.0.3
CVSS
2.7 (low)
Published
2024-10-31
Title
Multiple Page Generator Plugin – MPG < 4.0.2 - Missing Authorization
Fixed in
Fixed in 4.0.2
CVSS
5.4 (medium)
Published
2024-09-25
Title
Multiple Page Generator Plugin – MPG < 3.4.8 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 3.4.8
CVSS
6.5 (medium)
Published
2024-04-05
Title
Multiple Page Generator Plugin – MPG < 3.4.1 - Cross-Site Request Forgery
Fixed in
Fixed in 3.4.1
CVSS
4.3 (medium)
Published
2024-03-26
Title
Multiple Page Generator Plugin – MPG < 3.4.1 - Missing Authorization via mpg_get_log_by_project_id
Fixed in
Fixed in 3.4.1
CVSS
4.3 (medium)
Published
2024-03-13
Title
Multiple Page Generator Plugin – MPG < 3.4.1 - Authenticated (Editor+) Remote Code Execution
Fixed in
Fixed in 3.4.1
CVSS
7.2 (high)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.0.0
CVSS
6.1 (medium)
Published
2023-05-23
Title
Multiple Page Generator – MPG < 3.3.20 - SQL Injection
Fixed in
Fixed in 3.3.20
CVSS
4.1 (medium)
Published
2023-05-16
Title
Multiple Page Generator < 3.3.18 - Admin+ SQLi
Fixed in
Fixed in 3.3.18
CVSS
4.1 (medium)
Published
2023-05-16
Title
Multiple Page Generator < 3.3.18 - SQLi via CSRF
Fixed in
Fixed in 3.3.18
CVSS
3.1 (low)
Published
2023-02-20
Title
Multiple Page Generator Plugin - MPG < 3.3.10 - Multiple CSRF
Fixed in
Fixed in 3.3.10
CVSS
4.3 (medium)