Creativemindssolutions vulnerabilities
31 CVEs and advisories name Creativemindssolutions as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-16601CM Map Locations <= 2.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action
- CVE-2026-8892CM Business Directory <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Business Address Meta Fields
- CVE-2026-9236CM Ad Changer <= 2.0.7 - Cross-Site Request Forgery to Campaign Deletion via Campaign Management
- CVE-2026-2432CM Custom Reports <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Labels
- CVE-2026-2431CM Custom Reports <= 1.2.7 - Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameters
- CVE-2026-25004WordPress CM Business Directory plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-0691CM E-Mail Blacklist <= 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'black_email' Parameter
- CVE-2025-54045WordPress CM On Demand Search And Replace plugin <= 1.5.5 - Broken Access Control vulnerability
- CVE-2025-11167CM Registration – Tailored tool for seamless login and invitation-based registrations <= 2.5.6 - Open Redirect
- CVE-2025-10178CM Business Directory <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2025-48151WordPress CM Map Locations <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-54727WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-54728WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) Vulnerability
- CVE-2025-54018WordPress CM Pop-Up banners plugin <= 1.8.4 - Broken Access Control Vulnerability
- CVE-2025-46246WordPress CM Answers plugin <= 3.3.3 - Cross Site Request Forgery (CSRF) Vulnerability
- CVE-2025-46245WordPress CM Ad Changer plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) Vulnerability
- CVE-2025-32210WordPress CM Registration and Invitation Codes plugin <= 2.5.6 - Broken Access Control vulnerability
- CVE-2025-31091WordPress CM Header and Footer plugin <= 1.2.4 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-30910WordPress CM Download Manager plugin <= 2.9.6 - Arbitrary File Deletion vulnerability
- CVE-2025-2166CM FAQ – Simplify support with an intuitive FAQ management tool <= 1.2.5 - Reflected Cross-Site Scripting
- CVE-2025-24758WordPress CM Map Locations plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-24694WordPress CM Pop-Up Banners plugin <= 1.7.6 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-54267WordPress CM Answers plugin <= 3.2.6 - Broken Access Control vulnerability
- CVE-2024-11202Multiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcode
- CVE-2024-48041WordPress CM Tooltip Glossary plugin <= 4.3.9 - Stored Cross-Site Scripting vulnerability
- CVE-2024-43149WordPress CM Tooltip Glossary Plugin <= 4.3.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-4086CM Tooltip Glossary – Powerful Glossary Plugin <= 4.2.11 - Cross-Site Request Forgery
- CVE-2023-30750WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL Injection
- CVE-2023-28749WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-31228WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)