CreativeMindsSolutions

Records49All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

CreativeMindsSolutions records in CISA KEV

No CreativeMindsSolutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cm Download Manager 8 records HIGH Cm Popup 3 records MEDIUM Cm Search And Replace 3 records MEDIUM Cm Answers 2 records LOW Cm Table Of Contents 2 records MEDIUM Tooltip Glossary 2 records LOW Cm Ad Changer 1 record LOW Cm E-mail Blacklist 1 record HIGH

Records

3 records in Cm Search And Replace · all components

TI-2024-04669 CVE-2024-5028 · GHSA-238h-vq9j-vxxx

CM WordPress Search And Replace Plugin < 1.3.9 - Plugin Reset via CSRF

MEDIUM 62

The CM WordPress Search And Replace Plugin WordPress plugin before 1.3.9 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2024-07-13 Fixed in 1.3.9 CWE-352

TI-2023-13261 CVE-2023-28749 · GHSA-frr4-p742-xj9m

WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00262 Published 2023-11-22 No fix listed CWE-352

TI-2023-14934 CVE-2023-31228 · GHSA-gxcc-9qq4-8xhr

WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-08-18 No fix listed CWE-79

Open these records in search →