ThemeLooks mFolio Lite

• CVE-2025-31847 Medium 6.5 WordPress mFolio Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability 0.4%
• CVE-2024-9307 Critical 9.9 mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files 1.0%