Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: CreativeMinds Clear all filters
TI-2022-04554 CVE-2022-4965 · GHSA-rhg5-7x2m-pq53

Invitation Code Content Restriction Plugin from CreativeMinds <= 1.5.4 - Reflected Cross-Site Scripting

Priority LOW 28

The Invitation Code Content Restriction Plugin from CreativeMinds plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘target_id’ parameter in all versions up to, and including, 1.5.4 due to insu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00489 Published 2024-04-09 No fix listed CWE-79
TI-2014-07252 CVE-2014-8877 · GHSA-p937-9x7h-c2gp

The alterSearchQuery function in lib/controllers/CmdownloadController.php in the…

Priority MEDIUM 58

The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Manager plugin before 2.0.4 for WordPress allows remote attackers to execute arbitrary PHP code via the CMDsearc…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.14373 Published 2014-12-05 No fix listed CWE-94