Vulnerabilities

TI-2024-04669 CVE-2024-5028 · GHSA-238h-vq9j-vxxx

CM WordPress Search And Replace Plugin < 1.3.9 - Plugin Reset via CSRF

MEDIUM 62

The CM WordPress Search And Replace Plugin WordPress plugin before 1.3.9 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2024-07-13 Fixed in 1.3.9 CWE-352

TI-2023-13261 CVE-2023-28749 · GHSA-frr4-p742-xj9m

WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00262 Published 2023-11-22 No fix listed CWE-352

TI-2023-14934 CVE-2023-31228 · GHSA-gxcc-9qq4-8xhr

WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-08-18 No fix listed CWE-79

Vulnerabilities

Filters

CM WordPress Search And Replace Plugin < 1.3.9 - Plugin Reset via CSRF

WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)