WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cm-download-manager
Published
2022-09-05
Title
CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload
Slug
cm-download-manager
Published
2024-03-04
Title
CM Download Manager < 2.9.0 - Download Deletion via CSRF
Slug
cm-download-manager
Published
2024-03-04
Title
CM Download and File Manager < 2.9.0 - Download Unpublish via CSRF
Slug
cm-download-manager
Published
2024-03-04
Title
CM Download and File Manager < 2.9.1 - Download Edit via CSRF
Slug
cm-download-manager
Published
2025-03-27
Title
CM Download Manager < 3.0.0 - Unauthenticated Arbitrary File Deletion
Slug
cm-email-blacklist
Published
2024-06-22
Title
CM Email Registration Blacklist and Whitelist < 1.4.9 - Add/Delete Emails via CSRF Add and delete any item from blacklist/whitelist
Slug
cm-email-blacklist
Published
2024-11-25
Title
Multiple Plugins from CreativeMindsSolutions - Reflected XSS
Slug
cm-email-blacklist
Published
2025-02-03
Title
CM E-Mail Blacklist – Simple email filtering for safer registration < 1.5.6 - Reflected Cross-Site Scripting
Slug
cm-email-blacklist
Published
2026-01-16
Title
CM E-Mail Blacklist < 1.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'black_email' Parameter
Slug
cm-faq
Published
2025-03-13
Title
CM FAQ – Simplify support with an intuitive FAQ management tool < 1.2.6 - Reflected Cross-Site Scripting
Slug
cm-header-footer-script-loader
Published
2024-11-25
Title
Multiple Plugins from CreativeMindsSolutions - Reflected XSS
Slug
cm-header-footer-script-loader
Published
2025-04-03
Title
CM Header and Footer < 1.2.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
cm-invitation-codes
Published
2025-04-07
Title
CM Registration and Invitation Codes < 3.3.8 - Missing Authorization
Slug
cm-invitation-codes
Published
2025-10-10
Title
CM Registration – Tailored tool for seamless login and invitation-based registrations < 2.5.7 - Open Redirect
Slug
cm-map-locations
Published
2025-02-11
Title
CM Map Locations < 2.0.9 - Reflected Cross-Site Scripting
Slug
cm-map-locations
Published
2025-07-21
Title
CM Map Locations < 2.1.7 - Reflected Cross-Site Scripting
Slug
cm-map-locations
Published
2026-08-24
Title
CM Map Locations < 2.1.9 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action
Slug
cm-on-demand-search-and-replace
Published
2023-04-28
Title
CM On Demand Search And Replace < 1.3.1 - Admin+ Stored XSS
Slug
cm-on-demand-search-and-replace
Published
2023-05-09
Title
CM On Demand Search And Replace < 1.3.1 - Multiple CSRF
Slug
cm-on-demand-search-and-replace
Published
2024-06-22
Title
CM WordPress Search And Replace Plugin < 1.3.9 - Plugin Reset via CSRF
Slug
cm-on-demand-search-and-replace
Published
2024-11-25
Title
Multiple Plugins from CreativeMindsSolutions - Reflected XSS
Slug
cm-on-demand-search-and-replace
Published
2025-08-14
Title
CM On Demand Search And Replace < 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cm-on-demand-search-and-replace
Published
2025-08-14
Title
CM On Demand Search And Replace < 1.5.3 - Cross-Site Request Forgery
Slug
cm-on-demand-search-and-replace
Published
2025-06-30
Title
CM On Demand Search And Replace <= 1.5.4 - Missing Authorization
Slug
cm-pop-up-banners
Published
2020-03-27
Title
CM Pop-Up banners < 1.4.11 - Authenticated Stored XSS