Feataholic Maz Loader — known CVE vulnerabilities

Every CVE whose affected-product data names Feataholic Maz Loader, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-24669 — CVSS 8.8 (high): The MAZ Loader – Preloader Builder for WordPress plugin before 1.3.3 does not validate or escape the loader_id parameter of the mzldr…
• CVE-2021-24668 — CVSS 4.3 (medium): The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary…