Mesmerize Companion
Mesmerize Companion has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Missing Authorization.
Every one of the 3 issues recorded for Mesmerize Companion has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Mesmerize Companion is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-3494Mesmerize Companion <= 1.6.148 - Authenticated (Contributor+) Stored Cross-Site Scripting via mesmerize_contact_form Shortcode
Read the full analysisVulnerability Records
Mesmerize Companion
Author
Horea Radu
The Mesmerize Companion plugin adds drag and drop page builder functionality to the Mesmerize theme. The Mesmerize Companion plugin features include: Beautiful ready-made homepage Drag and drop page customization 30+ predefined content sections Live content editing and many other features License Mesmerize Companion WordPress plugin, Copyright (C) 2017 Horea Radu Mesmerize Companion WordPress plugin is licensed under the GPL3 (https://www.gnu.org/licenses/gpl-3.0.en.html). Unless otherwise specified, all the theme files and scripts are licensed under GNU General Public License. The exceptions to this license are as follows: Hammer.JS – v2.0.8 – http://hammerjs.github.io/ Licensed under the MIT license (https://opensource.org/licenses/MIT) Copyright (c) Jorik Tangelder; countUp.js @inorganik – https://github.com/inorganik/countUp.js Licensed under the MIT license (https://opensource.org/licenses/MIT) Backstretch – http://srobbin.com/jquery-plugins/backstretch/ Copyright (c) 2013 Scott Robbin Licensed under the MIT license (https://opensource.org/licenses/MIT) modernizr v3.3.1 – https://modernizr.com/download?-setclasses-dontmin Licensed under the MIT license (https://opensource.org/licenses/MIT) Copyright (c) Faruk Ates, Paul Irish, Alex Sexton, Ryan Seddon, Patrick Kettner, Stu Cox, Richard Herrera Spectrum Colorpicker v1.8.0 – https://github.com/bgrins/spectrum Licensed under the MIT license (https://opensource.org/licenses/MIT) Copyright (c) Brian Grinstead SpeakingURL – https://github.com/pid/speakingurl Licensed under the BSD3 license (https://opensource.org/licenses/BSD-3-Clause) Copyright (c) 2013-2017 Sascha Droste pid@posteo.net Kirki by Aristeides Stathopoulos – https://github.com/aristath/kirki Licensed under the MIT license (https://opensource.org/licenses/MIT) Images The following images used in the plugin are distributed under Creative Commons Zero license, http://creativecommons.org/publicdomain/zero/1.0/ * theme-data/mesmerize/sections/images/about-img-5.jpg Source: https://pixabay.com/en/urban-people-crowd-citizens-438393/ * theme-data/mesmerize/sections/images/apple-1838564-big.jpg Source: https://pixabay.com/en/apple-black-business-desk-keyboard-1838564/ * theme-data/mesmerize/sections/images/apple-1838564.jpg Source: https://pixabay.com/en/apple-black-business-desk-keyboard-1838564/ * theme-data/mesmerize/sections/images/background-2498615.jpg Source: https://pixabay.com/en/background-red-gloss-art-color-2498615/ * theme-data/mesmerize/sections/images/computer-2569652.jpg Source: https://pixabay.com/en/computer-keyboard-apple-electronics-2569652/ * theme-data/mesmerize/sections/images/laptop-2559795.jpg Source: https://pixabay.com/en/laptop-apple-macbook-computer-2559795/ * theme-data/mesmerize/sections/images/mockup-863469.jpg Source: https://everypixel.com/image-1191756555950098452 * theme-data/mesmerize/sections/images/people-2605526.jpg Source: https://pixabay.com/en/people-girl-beauty-face-eyebrow-2605526/ * theme-data/mesmerize/sections/images/team-1.jpg Source: https://www.pexels.com/photo/beautiful-beauty-black-and-white-face-432588/ * theme-data/mesmerize/sections/images/team-2.jpg Source: https://www.pexels.com/photo/adult-business-businessman-close-up-428339/ * theme-data/mesmerize/sections/images/team-3.jpg Source: https://www.pexels.com/photo/attractive-beautiful-beauty-casual-206560/ * theme-data/mesmerize/sections/images/team-4.jpg Source: https://www.pexels.com/photo/adult-attractive-beanie-beautiful-355022/ * theme-data/mesmerize/sections/images/team-5.jpg Source: https://www.pexels.com/photo/men-s-black-coat-with-white-polo-shirt-213117/ * theme-data/mesmerize/sections/images/team-6.jpg Source: https://pixabay.com/en/model-female-girl-beautiful-woman-429733/ * theme-data/mesmerize/sections/images/team-7.jpg Source: https://www.pexels.com/photo/portrait-of-young-man-in-autumn-247917/ * theme-data/mesmerize/sections/images/team-8.jpg Source: https://pixabay.com/en/fashion-woman-clothing-female-1623088/ * theme-data/mesmerize/sections/images/urban-438393.jpg Source: https://pixabay.com/en/urban-people-crowd-citizens-438393/ * theme-data/mesmerize/sections/images/woman-1209584.jpg Source: https://pixabay.com/en/woman-portrait-face-beautiful-1209584/ The following images are exported from Font Awesome Font Awesome 4.7.0 by @davegandy – http://fontawesome.io – @fontawesome License – http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) * customizer/assets/icons/brush-hover.png * customizer/assets/icons/brush.png * customizer/assets/icons/check.png * customizer/assets/icons/chevron-right.png * customizer/assets/icons/close.png * customizer/assets/icons/cog-white.png * customizer/assets/icons/cog.png * customizer/assets/icons/plus-black.png * customizer/assets/icons/plus.png * customizer/assets/icons/slash.png * customizer/assets/icons/swap.png * customizer/assets/icons/toggle-menu-active.png * customizer/assets/icons/toggle-menu.png * customizer/assets/icons/toolbar-cog.png * customizer/assets/icons/trash-o.png * customizer/assets/icons/trash.png * customizer/assets/icons/up-down.png The following images are the creation of Horea Radu and are distributed under the Creative Commons Zero License, http://creativecommons.org/publicdomain/zero/1.0/ * theme-data/mesmerize/sections/images/logo1.png * theme-data/mesmerize/sections/images/logo2.png * theme-data/mesmerize/sections/images/logo3.png * theme-data/mesmerize/sections/images/logo4.png * sections/images/quote.png * customizer/assets/icons/reorder-handler.png
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C