İçeriğe atla
Noroxi

cminds kayıtları

cminds üreticisine ait 24 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%66,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

24 kayıt
  • CVE-2024-1962
    35İzleyin

    CM Download and File Manager < 2.9.1 - Download Edit via CSRF

    YüksekCVSS 8,8İstismar yokEPSS %0

    cminds · cm download manager25 Mar 2024

  • CVE-2023-28749
    35İzleyin

    WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    cminds · cm search and replace22 Kas 2023

  • CVE-2025-46246
    35İzleyin

    WordPress CM Answers plugin <= 3.3.3 - Cross Site Request Forgery (CSRF) Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    cminds · cm answers22 Nis 2025

  • CVE-2025-46245
    35İzleyin

    WordPress CM Ad Changer plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    cminds · cm ad changer22 Nis 2025

  • CVE-2020-24146
    33İzleyin

    Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized users to delete arbitr

    YüksekCVSS 8,1İstismar yokEPSS %2

    cminds · cm download manager7 Tem 2021

  • CVE-2023-30750
    32İzleyin

    WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL Injection

    YüksekCVSS 8,1İstismar yokEPSS %1

    cminds · cm popup20 Ara 2023

  • CVE-2024-5167
    32İzleyin

    CM Email Registration Blacklist and Whitelist < 1.4.9 - Add/Delete Emails via CSRF Add and delete any item from blacklist/whitelist

    YüksekCVSS 8,1İstismar yokEPSS %0

    cminds · cm e-mail blacklist13 Tem 2024

  • CVE-2022-3076
    28İzleyin

    CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload

    YüksekCVSS 7,2İstismar yokEPSS %2

    cminds · cm download manager26 Eyl 2022

  • CVE-2014-9129
    27İzleyin

    Cross-site request forgery (CSRF) vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7 for WordPress allows remote at

    OrtaCVSS 6,8İstismar yokEPSS %2

    cminds · cm download manager5 Ara 2014

  • CVE-2024-1231
    27İzleyin

    CM Download and File Manager < 2.9.0 - Download Unpublish via CSRF

    OrtaCVSS 6,8İstismar yokEPSS %0

    cminds · cm download manager25 Mar 2024

  • CVE-2024-5028
    26İzleyin

    CM WordPress Search And Replace Plugin < 1.3.9 - Plugin Reset via CSRF

    OrtaCVSS 6,5İstismar yokEPSS %0

    cminds · cm search and replace13 Tem 2024

  • CVE-2016-1000132
    25İzleyin

    Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8

    OrtaCVSS 6,1Kavram kanıtıEPSS %4

    cminds · tooltip glossary10 Eki 2016

  • CVE-2020-27344
    24İzleyin

    The cm-download-manager plugin before 2.8.0 for WordPress allows XSS.

    OrtaCVSS 6,1İstismar yokEPSS %1

    cminds · cm download manager21 Eki 2020

  • CVE-2020-24145
    24İzleyin

    Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows remote attac

    OrtaCVSS 6,1İstismar yokEPSS %1

    cminds · cm download manager7 Tem 2021

  • CVE-2021-24678
    21İzleyin

    CM Tooltip Glossary < 3.9.21 - Contributor+ Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %1

    cminds · tooltip glossary4 Eki 2021

  • CVE-2021-24713
    19İzleyin

    Video Lessons Manager - Admin+ Stored Cross-Site Scripting

    OrtaCVSS 4,8İstismar yokEPSS %1

    cminds · video lessons manager23 Kas 2021

  • CVE-2023-25992
    19İzleyin

    WordPress CM Answers Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 4,8İstismar yokEPSS %0

    cminds · cm answers23 Mar 2023

  • CVE-2023-31228
    19İzleyin

    WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 4,8İstismar yokEPSS %0

    cminds · cm search and replace18 Ağu 2023

  • CVE-2024-5004
    19İzleyin

    CM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS

    OrtaCVSS 4,8İstismar yokEPSS %0

    cminds · cm popup22 Tem 2024

  • CVE-2024-5799
    19İzleyin

    CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS

    OrtaCVSS 4,8İstismar yokEPSS %0

    cminds · cm popup12 Eyl 2024

  • CVE-2024-5026
    19İzleyin

    CM Tooltip Glossary < 4.3.4 - Admin+ Stored XSS

    OrtaCVSS 4,8İstismar yokEPSS %0

    cminds · cm tooltip glossary15 May 2025

  • CVE-2024-1232
    19İzleyin

    CM Download Manager < 2.9.0 - Download Deletion via CSRF

    OrtaCVSS 4,8İstismar yokEPSS %0

    cminds · cm download manager25 Mar 2024

  • CVE-2024-5029
    19İzleyin

    CM Table Of Contents – WordPress TOC Plugin < 1.2.4 - Stored XSS via CSRF

    OrtaCVSS 4,8İstismar yokEPSS %0

    cminds · cm table of contents21 Kas 2024

  • CVE-2024-5030
    15İzleyin

    CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRF

    DüşükCVSS 3,8İstismar yokEPSS %0

    cminds · cm table of contents18 Kas 2024