Cminds vulnerabilities, page 2
24 vulnerabilities
Known vulnerabilities in Cminds products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 10 products.
MediumCVE-2023-31228cminds · cm_search_and_replace +2 moreWordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.EPSS0.37%MediumCVE-2023-25992cminds · cm_answers +2 moreWordPress CM Answers Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM Answers plugin <= 3.1.9 versions.EPSS0.37%HighCVE-2023-28749cminds · cm_search_and_replace +2 moreWordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.EPSS0.26%HighCVE-2023-30750cminds · cm_popup +2 moreWordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL InjectionImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeMindsSolutions CM Popup Plugin for WordPress.This issue affects CM Popup Plugin for WordPress: from n/a through 1.5.10.EPSS0.63%