Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: CreativeMindsSolutions Component: Cm Popup Clear all filters
TI-2024-05376 CVE-2024-5799 · GHSA-wpxq-m249-cq6r

CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS

Priority MEDIUM 55

The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0033 Published 2024-09-12 Fixed in 1.7.3 CWE-79
TI-2024-04647 CVE-2024-5004 · GHSA-26hr-4x6c-5c7x

CM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS

Priority MEDIUM 58

The CM Popup Plugin for WordPress WordPress plugin before 1.6.6 does not sanitise and escape some of the campaign settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scriptin…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00349 Published 2024-07-22 Fixed in 1.6.6 CWE-79
TI-2023-14564 CVE-2023-30750 · GHSA-v38r-f6qh-h574

WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL Injection

Priority LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeMindsSolutions CM Popup Plugin for WordPress.This issue affects CM Popup Plugin for WordPress: from n/a throug…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00625 Published 2023-12-20 No fix listed CWE-89