Skip to content
Cminds vulnerabilities
Newest
-
cminds cm tooltip glossary
CM Tooltip Glossary < 4.3.4 - Admin+ Stored XSS
CVE-2024-5026
4.8 Medium
-
cminds cm answers
WordPress CM Answers plugin <= 3.3.3 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-46246
4.3 Medium
-
cminds cm ad changer
WordPress CM Ad Changer plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-46245
4.3 Medium
-
cminds cm table of contents
CM Table Of Contents – WordPress TOC Plugin < 1.2.4 - Stored XSS via CSRF
CVE-2024-5029
4.8 Medium
-
cminds cm table of contents, creativemindssolutions cm-table-of-content +1 more
CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRF
CVE-2024-5030
3.8 Low
-
creativemindssolutions cm pop-up banners, unknown cm pop-up banners for wordpress, cminds cm popup +2 more
CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS
CVE-2024-5799
4.8 Medium
-
cminds cm popup, unknown cm popup plugin for wordpress +1 more
CM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS
CVE-2024-5004
4.8 Medium
-
creativemindssolutions cm email registration blacklist and whitelist, cminds cm e-mail blacklist +1 more
CM Email Registration Blacklist and Whitelist < 1.4.9 - Add/Delete Emails via CSRF Add and delete any item from blacklist/whitelist
CVE-2024-5167
8.1 High
-
creativemindssolutions search and replace, unknown cm wordpress search and replace plugin, cminds cm search and replace +2 more
CM WordPress Search And Replace Plugin < 1.3.9 - Plugin Reset via CSRF
CVE-2024-5028
6.5 Medium
-
cminds cm download manager
CM Download and File Manager < 2.9.1 - Download Edit via CSRF
CVE-2024-1962
8.8 High
-
cminds cm download manager
CM Download Manager < 2.9.0 - Download Deletion via CSRF
CVE-2024-1232
4.8 Medium
-
cminds cm download manager
CM Download and File Manager < 2.9.0 - Download Unpublish via CSRF
CVE-2024-1231
6.8 Medium
-
cminds cm popup, creativemindssolutions cm popup plugin for wordpress +1 more
WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL Injection
CVE-2023-30750
8.5 High
-
creativemindssolutions cm on demand search and replace, cminds cm search and replace +1 more
WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-28749
4.3 Medium
-
creativemindssolutions cm on demand search and replace, cminds cm search and replace +1 more
WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-31228
5.9 Medium
-
cminds cm answers
WordPress CM Answers Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-25992
5.9 Medium
-
cminds cm download manager
CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload
CVE-2022-3076
7.2 High
-
cminds video lessons manager, todo video lessons manager pro – best video course lms, video lessons manager – best video course lms +2 more
Video Lessons Manager - Admin+ Stored Cross-Site Scripting
CVE-2021-24713
4.8 Medium
-
cminds tooltip glossary, unknown cm tooltip glossary – better seo and uex for your wp site +1 more
CM Tooltip Glossary < 3.9.21 - Contributor+ Stored Cross-Site Scripting
CVE-2021-24678
5.4 Medium
-
cminds cm download manager
Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for...
CVE-2020-24146
8.1 High
-
cminds cm download manager
Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager)...
CVE-2020-24145
6.1 Medium
-
cminds cm download manager
The cm-download-manager plugin before 2.8.0 for WordPress allows XSS.
CVE-2020-27344
6.1 Medium
-
cminds tooltip glossary
Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8
CVE-2016-1000132
6.1 Medium
-
cminds cm download manager
Cross-site request forgery (CSRF) vulnerability in the CreativeMinds CM Downloads Manager plugin...
CVE-2014-9129
6.8 Medium