MadrasThemes
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| MAS Elementor | 2 | – | Jan 8, 2025 |
| MAS Videos | 2 | – | Mar 13, 2026 |
| MAS Companies For WP Job Manager | 1 | – | Oct 18, 2024 |
| MAS Static Content | 1 | – | Sep 25, 2024 |
Exploited and recent CVEs
- CVE-2026-32348 WordPress MAS Videos plugin <= 1.3.2 - Broken Access Control vulnerability 0.2%
- CVE-2025-62753 WordPress MAS Videos plugin <= 1.3.4 - Local File Inclusion vulnerability 0.4%
- CVE-2024-12328 MAS Elementor <= 1.1.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG 0.3%
- CVE-2024-49233 WordPress MAS Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-9206 MAS Companies For WP Job Manager <= 1.0.13 - Reflected Cross-Site Scripting 0.4%
- CVE-2024-8483 MAS Static Content <= 1.0.8 - Authenticated (Contributor+) Private Static Content Page Disclosure 0.4%