Skip to content

Creativemindssolutions vulnerabilities

Products

Newest

creativemindssolutions cm map locations – visualize and share your locations in a few clicks CM Map Locations <= 2.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action CVE-2026-16601 8.8 HighAugust 25, 2026
creativemindssolutions cm business directory – optimise and showcase local business CM Business Directory <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Business Address Meta Fields CVE-2026-8892 6.4 MediumJuly 3, 2026
creativemindssolutions cm ad changer – a simple tool to control and optimize your site's banners CM Ad Changer <= 2.0.7 - Cross-Site Request Forgery to Campaign Deletion via Campaign Management CVE-2026-9236 4.3 MediumMay 27, 2026
creativemindssolutions cm custom reports – flexible reporting to track what matters most CM Custom Reports <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Labels CVE-2026-2432 4.4 MediumMarch 20, 2026
creativemindssolutions cm custom reports – flexible reporting to track what matters most CM Custom Reports <= 1.2.7 - Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameters CVE-2026-2431 6.1 MediumMarch 7, 2026
creativemindssolutions cm business directory WordPress CM Business Directory plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-25004 5.9 MediumFebruary 19, 2026
creativemindssolutions cm e-mail blacklist – simple email filtering for safer registration CM E-Mail Blacklist <= 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'black_email' Parameter CVE-2026-0691 4.4 MediumJanuary 17, 2026
creativemindssolutions cm on demand search and replace WordPress CM On Demand Search And Replace plugin <= 1.5.5 - Broken Access Control vulnerability CVE-2025-54045 4.3 MediumDecember 16, 2025
creativemindssolutions cm registration – tailored tool for seamless login and invitation-based registrations CM Registration – Tailored tool for seamless login and invitation-based registrations <= 2.5.6 - Open Redirect CVE-2025-11167 4.7 MediumOctober 11, 2025
creativemindssolutions cm business directory – optimise and showcase local business CM Business Directory <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-10178 6.4 MediumSeptember 26, 2025
creativemindssolutions cm map locations WordPress CM Map Locations <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48151 7.1 HighAugust 20, 2025
creativemindssolutions cm on demand search and replace WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability CVE-2025-54727 5.9 MediumAugust 14, 2025
creativemindssolutions cm on demand search and replace WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-54728 4.3 MediumAugust 14, 2025
creativemindssolutions cm pop-up banners WordPress CM Pop-Up banners plugin <= 1.8.4 - Broken Access Control Vulnerability CVE-2025-54018 4.3 MediumJuly 16, 2025
cminds cm answers WordPress CM Answers plugin <= 3.3.3 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-46246 4.3 MediumApril 22, 2025
cminds cm ad changer WordPress CM Ad Changer plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-46245 4.3 MediumApril 22, 2025
creativemindssolutions cm registration and invitation codes WordPress CM Registration and Invitation Codes plugin <= 2.5.6 - Broken Access Control vulnerability CVE-2025-32210 6.5 MediumApril 10, 2025
creativemindssolutions cm header and footer WordPress CM Header and Footer plugin <= 1.2.4 - Cross Site Scripting (XSS) Vulnerability CVE-2025-31091 6.5 MediumApril 3, 2025
creativemindssolutions cm download manager WordPress CM Download Manager plugin <= 2.9.6 - Arbitrary File Deletion vulnerability CVE-2025-30910 8.6 HighApril 1, 2025
creativemindssolutions cm faq – simplify support with an intuitive faq management tool CM FAQ – Simplify support with an intuitive FAQ management tool <= 1.2.5 - Reflected Cross-Site Scripting CVE-2025-2166 6.1 MediumMarch 14, 2025
creativemindssolutions cm map locations WordPress CM Map Locations plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-24758 7.1 HighMarch 3, 2025
creativemindssolutions cm pop-up banners WordPress CM Pop-Up Banners plugin <= 1.7.6 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-24694 7.1 HighMarch 3, 2025
creativemindssolutions cm answers WordPress CM Answers plugin <= 3.2.6 - Broken Access Control vulnerability CVE-2024-54267 4.3 MediumDecember 13, 2024
creativemindssolutions cm business directory – optimise and showcase local business, cm e-mail blacklist – simple email filtering for safer registration, cm header and footer – add custom scripts and styles to your header and footer with ease +4 more +6 more Multiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcode CVE-2024-11202 6.1 MediumNovember 26, 2024
cminds cm table of contents, creativemindssolutions cm-table-of-content +1 more CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRF CVE-2024-5030 3.8 LowNovember 18, 2024
creativemindssolutions cm tooltip glossary WordPress CM Tooltip Glossary plugin <= 4.3.9 - Stored Cross-Site Scripting vulnerability CVE-2024-48041 6.5 MediumOctober 11, 2024
creativemindssolutions cm pop-up banners, unknown cm pop-up banners for wordpress, cminds cm popup +2 more CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS CVE-2024-5799 4.8 MediumSeptember 12, 2024
creativemindssolutions cm tooltip glossary WordPress CM Tooltip Glossary Plugin <= 4.3.7 - Cross Site Scripting (XSS) vulnerability CVE-2024-43149 6.5 MediumAugust 12, 2024
creativemindssolutions cm email registration blacklist and whitelist, cminds cm e-mail blacklist +1 more CM Email Registration Blacklist and Whitelist < 1.4.9 - Add/Delete Emails via CSRF Add and delete any item from blacklist/whitelist CVE-2024-5167 8.1 HighJuly 13, 2024
creativemindssolutions search and replace, unknown cm wordpress search and replace plugin, cminds cm search and replace +2 more CM WordPress Search And Replace Plugin < 1.3.9 - Plugin Reset via CSRF CVE-2024-5028 6.5 MediumJuly 13, 2024
creativemindssolutions cm tooltip glossary CM Tooltip Glossary – Powerful Glossary Plugin <= 4.2.11 - Cross-Site Request Forgery CVE-2024-4086 4.3 MediumMay 2, 2024
cminds cm download manager CM Download and File Manager < 2.9.1 - Download Edit via CSRF CVE-2024-1962 8.8 HighMarch 25, 2024
cminds cm download manager CM Download Manager < 2.9.0 - Download Deletion via CSRF CVE-2024-1232 4.8 MediumMarch 25, 2024
cminds cm download manager CM Download and File Manager < 2.9.0 - Download Unpublish via CSRF CVE-2024-1231 6.8 MediumMarch 25, 2024
cminds cm popup, creativemindssolutions cm popup plugin for wordpress +1 more WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL Injection CVE-2023-30750 8.5 HighDecember 20, 2023
creativemindssolutions cm on demand search and replace, cminds cm search and replace +1 more WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-28749 4.3 MediumNovember 22, 2023
creativemindssolutions cm on demand search and replace, cminds cm search and replace +1 more WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-31228 5.9 MediumAugust 18, 2023
cminds cm answers WordPress CM Answers Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS) CVE-2023-25992 5.9 MediumMarch 23, 2023
cminds cm download manager CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload CVE-2022-3076 7.2 HighSeptember 26, 2022