Read the docs

CreativeMindsSolutions

Records49All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

CreativeMindsSolutions records in CISA KEV

No CreativeMindsSolutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cm Download Manager 8 records HIGH Cm Popup 3 records MEDIUM Cm Search And Replace 3 records MEDIUM Cm Answers 2 records LOW Cm Table Of Contents 2 records MEDIUM Tooltip Glossary 2 records LOW Cm Ad Changer 1 record LOW Cm E-mail Blacklist 1 record HIGH

Records

3 records in Cm Popup · all components

TI-2024-04647 CVE-2024-5004 · GHSA-26hr-4x6c-5c7x

CM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS

Priority MEDIUM 58

The CM Popup Plugin for WordPress WordPress plugin before 1.6.6 does not sanitise and escape some of the campaign settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scriptin…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00349 Published 2024-07-22 Fixed in 1.6.6 CWE-79
TI-2024-05376 CVE-2024-5799 · GHSA-wpxq-m249-cq6r

CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS

Priority MEDIUM 55

The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0033 Published 2024-09-12 Fixed in 1.7.3 CWE-79
TI-2023-14564 CVE-2023-30750 · GHSA-v38r-f6qh-h574

WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL Injection

Priority LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeMindsSolutions CM Popup Plugin for WordPress.This issue affects CM Popup Plugin for WordPress: from n/a throug…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00625 Published 2023-12-20 No fix listed CWE-89
Open these records in search →