Read the docs

cmsMinds

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

cmsMinds records in CISA KEV

No cmsMinds vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2024-35047 CVE-2024-52376 · GHSA-f8jj-m348-9r29

WordPress Boat Rental Plugin for WordPress plugin <= 1.0.1 - Arbitrary File Upload vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in cmsMinds Boat Rental Plugin for WordPress boat-rental-system allows Upload a Web Shell to a Web Server.This issue affects Boat Rental Plugin for WordPress:…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00511 Published 2024-11-14 No fix listed CWE-434
TI-2025-23224 CVE-2025-32126 · GHSA-2p2x-5p75-jj56

WordPress Pay with Contact Form 7 Plugin <= 1.0.4 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cmsMinds Pay with Contact Form 7 pay-with-contact-form-7 allows SQL Injection.This issue affects Pay with Contact Form…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00645 Published 2025-04-04 No fix listed CWE-89
TI-2025-32827 CVE-2025-52777 · GHSA-vq3h-cmj2-3jpx

WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmsMinds Pay with Contact Form 7 pay-with-contact-form-7 allows Reflected XSS.This issue affects Pay with Contact Form…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00224 Published 2025-07-16 No fix listed CWE-79
Open these records in search →