MadrasThemes

Products

ProductCVEsExploitedLatest
MAS Elementor2–Jan 8, 2025
MAS Videos2–Mar 13, 2026
MAS Companies For WP Job Manager1–Oct 18, 2024
MAS Static Content1–Sep 25, 2024

Exploited and recent CVEs

  • CVE-2026-32348 Medium 5.3 WordPress MAS Videos plugin <= 1.3.2 - Broken Access Control vulnerability 0.2%
  • CVE-2025-62753 High 7.5 WordPress MAS Videos plugin <= 1.3.4 - Local File Inclusion vulnerability 0.4%
  • CVE-2024-12328 Medium 6.4 MAS Elementor <= 1.1.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG 0.3%
  • CVE-2024-49233 Medium 6.5 WordPress MAS Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-9206 Medium 6.1 MAS Companies For WP Job Manager <= 1.0.13 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-8483 Medium 4.3 MAS Static Content <= 1.0.8 - Authenticated (Contributor+) Private Static Content Page Disclosure 0.4%