Skip to content
Noroxi

cminds records

24 published records for vendor cminds.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
66.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 16
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

24 records
  • CVE-2024-1962
    35Monitor

    CM Download and File Manager < 2.9.1 - Download Edit via CSRF

    HighCVSS 8.8No exploitEPSS 0%

    cminds · cm download managerMar 25, 2024

  • CVE-2023-28749
    35Monitor

    WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    cminds · cm search and replaceNov 22, 2023

  • CVE-2025-46246
    35Monitor

    WordPress CM Answers plugin <= 3.3.3 - Cross Site Request Forgery (CSRF) Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    cminds · cm answersApr 22, 2025

  • CVE-2025-46245
    35Monitor

    WordPress CM Ad Changer plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    cminds · cm ad changerApr 22, 2025

  • CVE-2020-24146
    33Monitor

    Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized users to delete arbitr

    HighCVSS 8.1No exploitEPSS 2%

    cminds · cm download managerJul 7, 2021

  • CVE-2023-30750
    32Monitor

    WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL Injection

    HighCVSS 8.1No exploitEPSS 1%

    cminds · cm popupDec 20, 2023

  • CVE-2024-5167
    32Monitor

    CM Email Registration Blacklist and Whitelist < 1.4.9 - Add/Delete Emails via CSRF Add and delete any item from blacklist/whitelist

    HighCVSS 8.1No exploitEPSS 0%

    cminds · cm e-mail blacklistJul 13, 2024

  • CVE-2022-3076
    28Monitor

    CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload

    HighCVSS 7.2No exploitEPSS 2%

    cminds · cm download managerSep 26, 2022

  • CVE-2014-9129
    27Monitor

    Cross-site request forgery (CSRF) vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7 for WordPress allows remote at

    MediumCVSS 6.8No exploitEPSS 2%

    cminds · cm download managerDec 5, 2014

  • CVE-2024-1231
    27Monitor

    CM Download and File Manager < 2.9.0 - Download Unpublish via CSRF

    MediumCVSS 6.8No exploitEPSS 0%

    cminds · cm download managerMar 25, 2024

  • CVE-2024-5028
    26Monitor

    CM WordPress Search And Replace Plugin < 1.3.9 - Plugin Reset via CSRF

    MediumCVSS 6.5No exploitEPSS 0%

    cminds · cm search and replaceJul 13, 2024

  • CVE-2016-1000132
    25Monitor

    Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8

    MediumCVSS 6.1Proof of conceptEPSS 4%

    cminds · tooltip glossaryOct 10, 2016

  • CVE-2020-27344
    24Monitor

    The cm-download-manager plugin before 2.8.0 for WordPress allows XSS.

    MediumCVSS 6.1No exploitEPSS 1%

    cminds · cm download managerOct 21, 2020

  • CVE-2020-24145
    24Monitor

    Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows remote attac

    MediumCVSS 6.1No exploitEPSS 1%

    cminds · cm download managerJul 7, 2021

  • CVE-2021-24678
    21Monitor

    CM Tooltip Glossary < 3.9.21 - Contributor+ Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 1%

    cminds · tooltip glossaryOct 4, 2021

  • CVE-2021-24713
    19Monitor

    Video Lessons Manager - Admin+ Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 1%

    cminds · video lessons managerNov 23, 2021

  • CVE-2023-25992
    19Monitor

    WordPress CM Answers Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    cminds · cm answersMar 23, 2023

  • CVE-2023-31228
    19Monitor

    WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    cminds · cm search and replaceAug 18, 2023

  • CVE-2024-5004
    19Monitor

    CM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    cminds · cm popupJul 22, 2024

  • CVE-2024-5799
    19Monitor

    CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    cminds · cm popupSep 12, 2024

  • CVE-2024-5026
    19Monitor

    CM Tooltip Glossary < 4.3.4 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    cminds · cm tooltip glossaryMay 15, 2025

  • CVE-2024-1232
    19Monitor

    CM Download Manager < 2.9.0 - Download Deletion via CSRF

    MediumCVSS 4.8No exploitEPSS 0%

    cminds · cm download managerMar 25, 2024

  • CVE-2024-5029
    19Monitor

    CM Table Of Contents – WordPress TOC Plugin < 1.2.4 - Stored XSS via CSRF

    MediumCVSS 4.8No exploitEPSS 0%

    cminds · cm table of contentsNov 21, 2024

  • CVE-2024-5030
    15Monitor

    CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRF

    LowCVSS 3.8No exploitEPSS 0%

    cminds · cm table of contentsNov 18, 2024