Log in Start free

CreativeMindsSolutions

Products

ProductCVEsExploitedLatest
CM On Demand Search And Replace5–Dec 16, 2025
CM Tooltip Glossary4–Nov 26, 2024
CM Business Directory – Optimise and showcase local business3–Jul 3, 2026
CM Answers3–Apr 22, 2025
CM Map Locations2–Aug 20, 2025
CM E-Mail Blacklist – Simple email filtering for safer registration2–Jan 17, 2026
CM Custom Reports – Flexible reporting to track what matters most2–Mar 20, 2026
CM Pop-Up banners2–Jul 16, 2025
CM Pop-Up – Create engaging popups to capture attention and boost interaction1–Nov 26, 2024
CM Popup Plugin for WordPress1–Dec 20, 2023
CM Registration – Tailored tool for seamless login and invitation-based registrations1–Oct 11, 2025
CM Registration and Invitation Codes1–Apr 10, 2025
CM Search And Replace – Optimize content edits with a powerful search and replace tool1–Nov 26, 2024
CM Ad Changer1–Apr 22, 2025
CM Video Lessons Manager – Simplify video lessons management for better education1–Nov 26, 2024
CM Ad Changer – A simple tool to control and optimize your site's banners1–May 27, 2026
CM Business Directory1–Feb 19, 2026
CM Download Manager1–Apr 1, 2025
CM FAQ – Simplify support with an intuitive FAQ management tool1–Mar 14, 2025
CM Header and Footer1–Apr 3, 2025
CM Header and Footer – Add custom scripts and styles to your header and footer with ease1–Nov 26, 2024
CM Map Locations – Visualize and share your locations in a few clicks1–Aug 25, 2026

Exploited and recent CVEs

  • CVE-2026-16601 High 8.8 CM Map Locations <= 2.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action 1.2%
  • CVE-2026-8892 Medium 6.4 CM Business Directory <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Business Address Meta Fields 0.3%
  • CVE-2026-9236 Medium 4.3 CM Ad Changer <= 2.0.7 - Cross-Site Request Forgery to Campaign Deletion via Campaign Management 0.1%
  • CVE-2026-2432 Medium 4.4 CM Custom Reports <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Labels 0.3%
  • CVE-2026-2431 Medium 6.1 CM Custom Reports <= 1.2.7 - Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameters 0.3%
  • CVE-2026-25004 Medium 5.9 WordPress CM Business Directory plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-0691 Medium 4.4 CM E-Mail Blacklist <= 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'black_email' Parameter 0.3%
  • CVE-2025-54045 Medium 4.3 WordPress CM On Demand Search And Replace plugin <= 1.5.5 - Broken Access Control vulnerability 0.2%
  • CVE-2025-11167 Medium 4.7 CM Registration – Tailored tool for seamless login and invitation-based registrations <= 2.5.6 - Open Redirect 0.2%
  • CVE-2025-10178 Medium 6.4 CM Business Directory <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-48151 High 7.1 WordPress CM Map Locations <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-54727 Medium 5.9 WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-54728 Medium 4.3 WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-54018 Medium 4.3 WordPress CM Pop-Up banners plugin <= 1.8.4 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-46246 Medium 4.3 WordPress CM Answers plugin <= 3.3.3 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-46245 Medium 4.3 WordPress CM Ad Changer plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-32210 Medium 6.5 WordPress CM Registration and Invitation Codes plugin <= 2.5.6 - Broken Access Control vulnerability 0.4%
  • CVE-2025-31091 Medium 6.5 WordPress CM Header and Footer plugin <= 1.2.4 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-30910 High 8.6 WordPress CM Download Manager plugin <= 2.9.6 - Arbitrary File Deletion vulnerability 0.6%
  • CVE-2025-2166 Medium 6.1 CM FAQ – Simplify support with an intuitive FAQ management tool <= 1.2.5 - Reflected Cross-Site Scripting 0.3%
  • CVE-2025-24758 High 7.1 WordPress CM Map Locations plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-24694 High 7.1 WordPress CM Pop-Up Banners plugin <= 1.7.6 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-54267 Medium 4.3 WordPress CM Answers plugin <= 3.2.6 - Broken Access Control vulnerability 0.4%
  • CVE-2024-11202 Medium 6.1 Multiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcode 0.6%
  • CVE-2024-11202 Medium 6.1 Multiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcode 0.6%
  • CVE-2024-11202 Medium 6.1 Multiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcode 0.6%
  • CVE-2024-11202 Medium 6.1 Multiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcode 0.6%
  • CVE-2024-11202 Medium 6.1 Multiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcode 0.6%
  • CVE-2024-11202 Medium 6.1 Multiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcode 0.6%
  • CVE-2024-11202 Medium 6.1 Multiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcode 0.6%