Creativemindssolutions CM On Demand Search And Replace vulnerabilities

5 vulnerabilities

Known vulnerabilities in Creativemindssolutions CM On Demand Search And Replace, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3MediumCVE-2025-54045creativemindssolutions · cm on demand search and replace +1 moreWordPress CM On Demand Search And Replace plugin <= 1.5.5 - Broken Access Control vulnerabilityMissing Authorization vulnerability in CreativeMindsSolutions CM On Demand Search And Replace cm-on-demand-search-and-replace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CM On Demand Search And Replace: from n/a through <= 1.5.5.EPSS0.22%5.9MediumCVE-2025-54727creativemindssolutions · cm on demand search and replace +1 moreWordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Scripting (XSS) VulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM On Demand Search And Replace cm-on-demand-search-and-replace allows Stored XSS.This issue affects CM On Demand Search And Replace: from n/a through <= 1.5.2.EPSS0.18%4.3MediumCVE-2025-54728creativemindssolutions · cm on demand search and replace +1 moreWordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) VulnerabilityCross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace cm-on-demand-search-and-replace allows Cross Site Request Forgery.This issue affects CM On Demand Search And Replace: from n/a through <= 1.5.2.EPSS0.13%5.9MediumCVE-2023-31228cminds · cm_search_and_replace +2 moreWordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.EPSS0.37%8.8HighCVE-2023-28749cminds · cm_search_and_replace +2 moreWordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.EPSS0.26%