Cminds Cm Search And Replace vulnerabilities

3 vulnerabilities

Known vulnerabilities in Cminds Cm Search And Replace, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5MediumCVE-2024-5028cminds · cm_search_and_replace +2 moreCM WordPress Search And Replace Plugin < 1.3.9 - Plugin Reset via CSRFThe CM WordPress Search And Replace Plugin WordPress plugin before 1.3.9 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacksEPSS0.22%5.9MediumCVE-2023-31228cminds · cm_search_and_replace +2 moreWordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.EPSS0.37%8.8HighCVE-2023-28749cminds · cm_search_and_replace +2 moreWordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.EPSS0.26%