Login Request a demo
CM
Vendor
Cminds
10 products with CVEs on record
24
CVEs
0
On KEV
0
New 30D
Products
CD
CM Download Manager
Cminds
8.8
8 CVEs0 on KEV0 new
CP
CM Popup
Cminds
8.1
3 CVEs0 on KEV0 new
CS
CM Search And Replace
Cminds
8.8
3 CVEs0 on KEV0 new
CA
CM Answers
Cminds
8.8
2 CVEs0 on KEV0 new
CT
CM Table OF Contents
Cminds
4.8
2 CVEs0 on KEV0 new
TG
Tooltip Glossary
Cminds
6.1
2 CVEs0 on KEV0 new
CA
CM AD Changer
Cminds
8.8
1 CVEs0 on KEV0 new
CE
CM E-mail Blacklist
Cminds
8.1
1 CVEs0 on KEV0 new
CT
CM Tooltip Glossary
Cminds
4.8
1 CVEs0 on KEV0 new
VL
Video Lessons Manager
Cminds
4.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2024-5026
CT
CM Tooltip Glossary
Cminds
4.8
0%
May 15CM Tooltip Glossary < 4.3.4 - Admin+ Stored XSS
CVE-2025-46246
CA
CM Answers
Cminds
8.8
0%
Apr 22WordPress CM Answers plugin <= 3.3.3 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-46245
CA
CM AD Changer
Cminds
8.8
0%
Apr 22WordPress CM Ad Changer plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2024-5029
CT
CM Table OF Contents
Cminds
4.8
0%
Nov 21CM Table Of Contents – WordPress TOC Plugin < 1.2.4 - Stored XSS via CSRF
CVE-2024-5030
CT
CM Table OF Contents
Cminds
3.8
0%
Nov 18CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRF
CVE-2024-5799
CP
CM Popup
Cminds
4.8
0%
Sep 12CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS
CVE-2024-5004
CP
CM Popup
Cminds
4.8
0%
Jul 22CM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS
CVE-2024-5167
CE
CM E-mail Blacklist
Cminds
8.1
0%
Jul 13CM Email Registration Blacklist and Whitelist < 1.4.9 - Add/Delete Emails via CSRF Add and delete any item from blacklist/whitelist
CVE-2024-5028
CS
CM Search And Replace
Cminds
6.5
0%
Jul 13CM WordPress Search And Replace Plugin < 1.3.9 - Plugin Reset via CSRF
CVE-2024-1962
CD
CM Download Manager
Cminds
8.8
0%
Mar 25CM Download and File Manager < 2.9.1 - Download Edit via CSRF
CVE-2024-1232
CD
CM Download Manager
Cminds
4.8
0%
Mar 25CM Download Manager < 2.9.0 - Download Deletion via CSRF
CVE-2024-1231
CD
CM Download Manager
Cminds
6.8
0%
Mar 25CM Download and File Manager < 2.9.0 - Download Unpublish via CSRF
CVE-2023-30750
CP
CM Popup
Cminds
8.1
1%
Dec 20Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeMindsSolutions CM Popup Plugin for WordPress.This issue affects CM…
CVE-2023-28749
CS
CM Search And Replace
Cminds
8.8
0%
Nov 22Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions
CVE-2023-31228
CS
CM Search And Replace
Cminds
4.8
0%
Aug 18Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions
CVE-2023-25992
CA
CM Answers
Cminds
4.8
0%
Mar 23Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM Answers plugin <= 3.1.9 versions
CVE-2022-3076
CD
CM Download Manager
Cminds
7.2
2%
Sep 26The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any extension via the plugin's setting,…
CVE-2021-24713
VL
Video Lessons Manager
Cminds
4.8
1%
Nov 23The Video Lessons Manager WordPress plugin before 1.7.2 and Video Lessons Manager Pro WordPress plugin before 3.5.9 do not properly sanitize and escape values when updating their…
CVE-2021-24678
TG
Tooltip Glossary
Cminds
5.4
1%
Oct 4The CM Tooltip Glossary WordPress plugin before 3.9.21 does not escape some glossary_tooltip shortcode attributes, which could allow users a role as low as Contributor to perform…
CVE-2020-24146
CD
CM Download Manager
Cminds
8.1
2%
Jul 7Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial…
CVE-2020-24145
CD
CM Download Manager
Cminds
6.1
1%
Jul 7Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows remote attackers to inject arbitrary web script or…
CVE-2020-27344
CD
CM Download Manager
Cminds
6.1
1%
Oct 21The cm-download-manager plugin before 2.8.0 for WordPress allows XSS
CVE-2016-1000132
TG
Tooltip Glossary
Cminds
6.1
4%
Oct 10Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8
CVE-2014-9129
CD
CM Download Manager
Cminds
–
2%
Dec 5Cross-site request forgery (CSRF) vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7 for WordPress allows remote attackers to hijack the authentication of…