Read the docs

ContentMX

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

ContentMX records in CISA KEV

No ContentMX vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-22718 CVE-2025-31555 · GHSA-hv45-666x-7h7j

WordPress ContentMX Content Publisher plugin <= 1.0.6 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in ContentMX ContentMX Content Publisher contentmx-content-publisher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ContentMX Content Publis…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00326 Published 2025-03-31 No fix listed CWE-862
TI-2025-09074 CVE-2025-9889 · GHSA-m8mj-3gxv-g87v

ContentMX Content Publisher <= 1.0.6 - Cross-Site Request Forgery

Priority LOW 19

The ContentMX Content Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00172 Published 2025-10-03 No fix listed CWE-352
Open these records in search →