Creativemotion vulnerabilities
5 vulnerabilities
Known vulnerabilities in Creativemotion products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Clearfy Cache – Wordpress Optimization Plugin, Minify Html, CSS & JS, Defer3 vulnerabilities
- Social Slider Feed1 vulnerabilities
- Titan Anti Spam & Security1 vulnerabilities
CVE-2025-13749creativemotionclearfy cache – wordpress optimization plugin, minify html, css & js, defer+1
EPSS score0.15%
The Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.0. This is due to missing nonce validation on the "wbcr_upm_change_flag" function. This makes it possible for unauthenticated attackers to disable plugin/theme update notifications via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.CVE-2024-13337cm-wpclearfy+2EPSS score0.20%
The Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.2. This is due to missing or incorrect nonce validation on the 'setup-wbcr_clearfy' page. This makes it possible for unauthenticated attackers to update the plugins settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.CVE-2024-13338cm-wpclearfy+2EPSS score0.15%
The Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.1. This is due to missing or incorrect nonce validation on the wclearfy_cache_delete functionality . This makes it possible for unauthenticated attackers to clear the cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.CVE-2024-43215creativemotionsocial slider feed+1EPSS score0.39%
Missing Authorization vulnerability in creativemotion Social Slider Feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Slider Feed: from n/a through 2.2.2.CVE-2024-38777creativemotiontitan anti-spam & security+1EPSS score0.49%
Missing Authorization vulnerability in CreativeMotion Titan Anti-spam & Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Titan Anti-spam & Security: from n/a through 7.3.6.