WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cm-ad-changer
Published
2025-04-22
Title
CM Ad Changer < 2.0.6 - Cross-Site Request Forgery
Slug
cm-answers
Published
2023-02-23
Title
CM Answers < 3.2.0 - Admin+ Stored XSS
Slug
cm-answers
Published
2024-12-10
Title
CM Answers < 3.2.7 - Missing Authorization
Slug
cm-answers
Published
2025-04-22
Title
CM Answers < 3.3.4 - Cross-Site Request Forgery
Slug
cm-business-directory
Published
2024-11-25
Title
Multiple Plugins from CreativeMindsSolutions - Reflected XSS
Slug
cm-business-directory
Published
2025-09-25
Title
CM Business Directory < 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cm-business-directory
Published
2026-01-16
Title
CM Business Directory – Optimise and showcase local business < 1.5.4 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
cm-css-columns
Published
2026-01-23
Title
CM CSS Columns <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attribute
Slug
cm-custom-reports
Published
2026-03-06
Title
CM Custom Reports < 1.2.8 - Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameters
Slug
cm-download-manager
Published
2014-11-20
Title
CM Download Manager < 2.0.4 - Unauthenticated Code Injection
Slug
cm-download-manager
Published
2015-01-16
Title
CM Download Manager < 2.0.7 - CSRF to Cross-Site Scripting
Slug
cm-download-manager
Published
2020-10-22
Title
CM Download Manager < 2.8.0 - Authenticated Cross-Site Scripting
Slug
cm-download-manager
Published
2021-04-13
Title
CM Download Manager < 2.8.0 - Unauthenticated Reflected Cross Site Scripting (XSS)
Slug
cm-download-manager
Published
2021-04-13
Title
CM Download Manager < 2.8.0 - Authenticated Arbitrary File Deletion
Slug
cm-download-manager
Published
2022-09-05
Title
CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload
Slug
cm-download-manager
Published
2024-03-04
Title
CM Download Manager < 2.9.0 - Download Deletion via CSRF
Slug
cm-download-manager
Published
2024-03-04
Title
CM Download and File Manager < 2.9.0 - Download Unpublish via CSRF
Slug
cm-download-manager
Published
2024-03-04
Title
CM Download and File Manager < 2.9.1 - Download Edit via CSRF
Slug
cm-download-manager
Published
2025-03-27
Title
CM Download Manager < 3.0.0 - Unauthenticated Arbitrary File Deletion
Slug
cm-email-blacklist
Published
2024-06-22
Title
CM Email Registration Blacklist and Whitelist < 1.4.9 - Add/Delete Emails via CSRF Add and delete any item from blacklist/whitelist
Slug
cm-email-blacklist
Published
2024-11-25
Title
Multiple Plugins from CreativeMindsSolutions - Reflected XSS
Slug
cm-email-blacklist
Published
2025-02-03
Title
CM E-Mail Blacklist – Simple email filtering for safer registration < 1.5.6 - Reflected Cross-Site Scripting
Slug
cm-email-blacklist
Published
2026-01-16
Title
CM E-Mail Blacklist < 1.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'black_email' Parameter
Slug
cm-faq
Published
2025-03-13
Title
CM FAQ – Simplify support with an intuitive FAQ management tool < 1.2.6 - Reflected Cross-Site Scripting
Slug
cm-header-footer-script-loader
Published
2024-11-25
Title
Multiple Plugins from CreativeMindsSolutions - Reflected XSS