Creativeitem vulnerabilities

Products

• Academy Lms 16
• Ekushey Project Manager Crm 6
• Ekushey Crm 3
• Ekushey Project Manager Crm 3
• Academy Lms 2
• Atlas 2
• Atlas Business Directory Listing 2
• Doctor Appointment Booking 2
• Ekushey Project Manager 2

Newest

• creativeitem ekushey project manager crm Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field CVE-2026-26211 Public exploit 4.8 MediumAugust 25, 2026
• creativeitem ekushey project manager crm Ekushey Project Manager CRM 5.0 Stored XSS via Reply Ticket Field CVE-2026-66031 5.1 MediumJuly 27, 2026
• creativeitem ekushey project manager crm Ekushey Project Manager CRM 5.0 Stored XSS via Ticket Title Field CVE-2026-66030 5.1 MediumJuly 27, 2026
• creativeitem ekushey project manager crm Ekushey Project Manager CRM 5.0 Stored XSS via Client Name Field CVE-2026-66029 5.1 MediumJuly 27, 2026
• creativeitem ekushey project manager crm Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Email CVE-2026-66028 7.1 HighJuly 27, 2026
• creativeitem academy lms Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via... CVE-2025-71179 6.1 MediumFebruary 3, 2026
• creativeitem academy lms Academy LMS 6.1 Arbitrary File Upload Vulnerability via Profile Settings CVE-2023-53876 5.1 MediumDecember 15, 2025
• creativeitem academy lms Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token... CVE-2025-56749 9.4 CriticalOctober 15, 2025
• creativeitem academy lms Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on... CVE-2025-56748 6.4 MediumOctober 15, 2025
• creativeitem academy lms Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful... CVE-2025-56746 2.2 LowOctober 15, 2025
• creativeitem academy lms Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability... CVE-2025-56747 6.5 MediumOctober 14, 2025
• creativeitem sociopro Stored XSS in Creativeitem Sociopro CVE-2025-40992 5.1 MediumOctober 2, 2025
• creativeitem ekushey crm, ekushey project manager crm +1 more Stored XSS in Creativeitem Ekushey CRM CVE-2025-40991 5.1 MediumOctober 2, 2025
• creativeitem ekushey crm, ekushey project manager crm +1 more Stored XSS in Creativeitem Ekushey CRM CVE-2025-40990 5.1 MediumOctober 2, 2025
• creativeitem ekushey crm, ekushey project manager crm +1 more Stored XSS in Creativeitem Ekushey CRM CVE-2025-40989 5.1 MediumOctober 2, 2025
• creativeitem doctor appointment booking WordPress Doctor Appointment Booking Plugin <= 1.0.0 - Local File Inclusion vulnerability CVE-2025-27264 7.5 HighMarch 3, 2025
• creativeitem doctor appointment booking WordPress Doctor Appointment Booking Plugin <= 1.0.0 - SQL Injection vulnerability CVE-2025-27263 8.5 HighMarch 3, 2025
• creativeitem academy lms Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1... CVE-2024-38959 6.1 MediumJuly 9, 2024
• academy lms, creativeitem academy lms +1 more Academy LMS GET Parameter filter sql injection CVE-2023-4974 6.3 MediumSeptember 15, 2023
• academy lms, creativeitem academy lms +1 more Academy LMS GET Parameter filter cross site scripting CVE-2023-4973 3.5 LowSeptember 15, 2023
• creativeitem academy lms Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability. CVE-2023-38964 6.1 MediumAugust 4, 2023
• academy lms, creativeitem academy lms +1 more Academy LMS courses cross site scripting CVE-2023-4119 Public exploit 4.3 MediumAugust 3, 2023
• creativeitem atlas, atlas business directory listing +1 more Creativeitem Atlas Business Directory Listing search cross site scripting CVE-2023-3756 3.5 LowJuly 19, 2023
• creativeitem atlas, atlas business directory listing +1 more Creativeitem Atlas Business Directory Listing filter_listings cross site scripting CVE-2023-3755 3.5 LowJuly 19, 2023
• creativeitem ekushey project manager crm, ekushey project manager +1 more Creativeitem Ekushey Project Manager CRM xxxxxxxx[random-msg-hash] cross site scripting CVE-2023-3754 3.5 LowJuly 19, 2023
• creativeitem mastery lms Creativeitem Mastery LMS browse cross site scripting CVE-2023-3753 3.5 LowJuly 19, 2023
• creativeitem academy lms Creativeitem Academy LMS courses cross site scripting CVE-2023-3752 3.5 LowJuly 19, 2023
• creativeitem academy lms A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily... CVE-2022-47132 Public exploit 8.8 HighFebruary 3, 2023
• creativeitem academy lms A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily... CVE-2022-47131 Public exploit 4.8 MediumFebruary 3, 2023
• creativeitem academy lms A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be... CVE-2022-47130 Public exploit 4.3 MediumFebruary 3, 2023
• creativeitem academy learning management system Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site... CVE-2022-38553 Public exploit 6.1 MediumSeptember 26, 2022
• creativeitem academy lms Academy-LMS v4.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability in... CVE-2022-29380 Public exploit 4.8 MediumMay 25, 2022
• creativeitem neoflex video subscription system Neoflex Video Subscription System Version 2.0 is affected by CSRF which allows the Website's... CVE-2020-22273 6.5 MediumNovember 4, 2020
• creativeitem ekushey project manager In the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input... CVE-2018-18417 Public exploit 5.4 MediumOctober 19, 2018