mFolio Lite

mFolio Lite has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 8.2, and the most serious one scores 9.9 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type.

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, one record each. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh

8.2/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all mFolio Lite vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-31847

mFolio Lite <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-04-01 00:00	mFolio Lite <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting mFolio Lite <= 1.2.2	`CVE-2025-31847`	6.4 Medium	Gab	No
2024-11-05 18:14	mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files mFolio Lite <= 1.2.1	`CVE-2024-9307`	9.9 Critical	Francesco Carlucci	Yes

Showing 1–2 of 2 reports

Latestv1.2.4

mFolio Lite

Author

themelooks

0.0(0)

0/100

Last Updated

2026-06-03 (3mo ago)

Active Installs

Downloads

1,664

Requires WP

6.9+

Requires PHP

8.1+

Tested up to

WP 7.0.4

Created

2020-06-23 (6y ago)

mFolio is WordPress Portfolio Plugin for Elementor. This all in one Modern Portfolio Collection allows you to showcase your portfolio, works and projects on your website in a modern and most impressive way using Elementor. You can upload photos, add descriptions, dates and more. It’s a WordPress plugin based on Elementor Page Builder. Anyone can easily update/edit this plugin by following our Well Sorted Main Features of mFolio: Compatibility with wordpress 6.7.x Pre-Built 14+ Modern Portfolio Variation Pre-Built 7+ Portfolio Details Variation Masonry Grid Style Portfolio Gallery Style Modern Portfolio Collection Fully Responsive Translation ready Ready for translation ( .pot files included ) Free Updates Error free code Well and Online Documentation and Video Tutorials Live Preview Checkout Pro Version Checkout Our Pro Profile Privacy Policy mFolio Lite uses Appsero SDK to collect some telemetry data upon user’s confirmation. This helps us to troubleshoot problems faster & make product improvements. Appsero SDK does not gather any data by default. The SDK only starts gathering basic telemetry data when a user allows it via the admin notice. We collect the data to ensure a great user experience for all our users. Integrating Appsero SDK DOES NOT IMMEDIATELY start gathering data, without confirmation from users in any case. Learn more about how Appsero collects and uses this data.

View on WordPress.org