CVEs we hold for Creativemindssolutions
Records whose assigning authority named Creativemindssolutions as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-9236CM Ad Changer <= 2.0.7 - Cross-Site Request Forgery to Campaign Deletion via Campaign Managementcreativemindssolutions CM Ad Changer – A simple tool to…
CVE-2026-8892CM Business Directory <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Business Address Meta…creativemindssolutions CM Business Directory – Optimise and…
CVE-2026-25004WordPress CM Business Directory plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerabilityCreativeMindsSolutions CM Business Directory
CVE-2026-2432CM Custom Reports <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Labelscreativemindssolutions CM Custom Reports – Flexible…
CVE-2026-2431CM Custom Reports <= 1.2.7 - Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameterscreativemindssolutions CM Custom Reports – Flexible…
CVE-2026-16601CM Map Locations <= 2.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Actioncreativemindssolutions CM Map Locations – Visualize and…
CVE-2026-0691CM E-Mail Blacklist <= 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'black_email' Parametercreativemindssolutions CM E-Mail Blacklist – Simple email…
CVE-2025-54728WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) VulnerabilityCreativeMindsSolutions CM On Demand Search And Replace
CVE-2025-54727WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Scripting (XSS) VulnerabilityCreativeMindsSolutions CM On Demand Search And Replace
CVE-2025-54045WordPress CM On Demand Search And Replace plugin <= 1.5.5 - Broken Access Control vulnerabilityCreativeMindsSolutions CM On Demand Search And Replace
CVE-2025-54018WordPress CM Pop-Up banners plugin <= 1.8.4 - Broken Access Control VulnerabilityCreativeMindsSolutions CM Pop-Up banners
CVE-2025-48151WordPress CM Map Locations <= 2.1.6 - Cross Site Scripting (XSS) VulnerabilityCreativeMindsSolutions CM Map Locations
CVE-2025-46246WordPress CM Answers plugin <= 3.3.3 - Cross Site Request Forgery (CSRF) VulnerabilityCreativeMindsSolutions CM Answers
CVE-2025-46245WordPress CM Ad Changer plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) VulnerabilityCreativeMindsSolutions CM Ad Changer
CVE-2025-32210WordPress CM Registration and Invitation Codes plugin <= 2.5.6 - Broken Access Control vulnerabilityCreativeMindsSolutions CM Registration and Invitation Codes
CVE-2025-31091WordPress CM Header and Footer plugin <= 1.2.4 - Cross Site Scripting (XSS) VulnerabilityCreativeMindsSolutions CM Header and Footer
CVE-2025-30910WordPress CM Download Manager plugin <= 2.9.6 - Arbitrary File Deletion vulnerabilityCreativeMindsSolutions CM Download Manager
CVE-2025-24758WordPress CM Map Locations plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerabilityCreativeMindsSolutions CM Map Locations
CVE-2025-24694WordPress CM Pop-Up Banners plugin <= 1.7.6 - Reflected Cross Site Scripting (XSS) vulnerabilityCreativeMindsSolutions CM Pop-Up banners
CVE-2025-2166CM FAQ – Simplify support with an intuitive FAQ management tool <= 1.2.5 - Reflected Cross-Site Scriptingcreativemindssolutions CM FAQ – Simplify support with an…
CVE-2025-11167CM Registration – Tailored tool for seamless login and invitation-based registrations <= 2.5.6 - Open Redirectcreativemindssolutions CM Registration – Tailored tool for…
CVE-2025-10178CM Business Directory <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativemindssolutions CM Business Directory – Optimise and…
CVE-2024-54267WordPress CM Answers plugin <= 3.2.6 - Broken Access Control vulnerabilityCreativeMindsSolutions CM Answers
CVE-2024-48041WordPress CM Tooltip Glossary plugin <= 4.3.9 - Stored Cross-Site Scripting vulnerabilityCreativeMindsSolutions CM Tooltip Glossary
CVE-2024-43149WordPress CM Tooltip Glossary Plugin <= 4.3.7 - Cross Site Scripting (XSS) vulnerabilityCreativeMindsSolutions CM Tooltip Glossary
CVE-2024-4086CM Tooltip Glossary – Powerful Glossary Plugin <= 4.2.11 - Cross-Site Request Forgerycreativemindssolutions CM Tooltip Glossary
CVE-2024-11202Multiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcodecreativemindssolutions CM Tooltip Glossary
CVE-2023-31228WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)CreativeMindsSolutions CM On Demand Search And Replace
CVE-2023-30750WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL InjectionCreativeMindsSolutions CM Popup Plugin for WordPress
CVE-2023-28749WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)CreativeMindsSolutions CM On Demand Search And Replace
CVE-2023-25992WordPress CM Answers Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)CreativeMindsSolutions CM Answers
31 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.