The Monday

The Monday has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2022; none of them are fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Missing Authorization, Unrestricted Upload Of File With Dangerous Type.

None of the 3 issues recorded for The Monday have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2021.

2 independent researchers contributed these findings, most of them (2) reported by R3N0.

Strategic Overview

Avg CVSSHigh

8.8/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all The Monday vulnerabilities before they are exploited.

Most severe open issueCVSS 8.8

AccessPress Themes and Plugin <= Various Versions - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

3 records


2022-01-11 00:00	AccessPress Themes and Plugin <= Various Versions - Cross-Site Request Forgery The Monday <= 1.4.1	`N/A`	8.8 High	R3N0	No
2022-01-11 00:00	AccessPress Themes and Plugin <= Various Versions - Missing Authorization to Arbitrary Plugin Deactivation/Activation The Monday <= 1.4.1	`CVE-2022-23975`	8.8 High	R3N0	No
2021-10-06 19:17	AccessPress Themes and Plugin <= Various Versions - Authenticated (Subscriber+) Arbitrary File Upload The Monday <= 1.4.1	`CVE-2021-39317`	8.8 High	Chloe Chamberland	No

Showing 1–3 of 3 reports