Vulnerabilities > Cminds > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-12-20 | CVE-2023-30750 | Unspecified vulnerability in Cminds CM Popup 1.5.10/1.5.8/1.5.9 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeMindsSolutions CM Popup Plugin for WordPress.This issue affects CM Popup Plugin for WordPress: from n/a through 1.5.10. | 8.1 |
| 2023-11-22 | CVE-2023-28749 | Unspecified vulnerability in Cminds CM on Demand Search and Replace Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions. | 8.8 |
| 2022-09-26 | CVE-2022-3076 | Unspecified vulnerability in Cminds CM Download Manager The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any extension via the plugin's setting, which could be used by admins of multisite blog to upload PHP files for example. | 7.2 |
| 2021-07-07 | CVE-2020-24146 | Path Traversal vulnerability in Cminds CM Download Manager 2.7.0 Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action. | 8.1 |