Log in Start free

Creativeitem

Products

ProductCVEsExploitedLatest
Ekushey Project Manager CRM6–Aug 25, 2026
Ekushey CRM3–Oct 2, 2025
Doctor Appointment Booking2–Mar 3, 2025
Academy LMS2–Dec 15, 2025
Atlas Business Directory Listing2–Jul 19, 2023
Mastery LMS1–Jul 19, 2023
Sociopro1–Oct 2, 2025

Exploited and recent CVEs

  • CVE-2026-26211 Medium 4.8 Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field 0.4%
  • CVE-2026-66031 Medium 5.4 Ekushey Project Manager CRM 5.0 Stored XSS via Reply Ticket Field 0.3%
  • CVE-2026-66030 Medium 5.4 Ekushey Project Manager CRM 5.0 Stored XSS via Ticket Title Field 0.3%
  • CVE-2026-66029 Medium 5.4 Ekushey Project Manager CRM 5.0 Stored XSS via Client Name Field 0.3%
  • CVE-2026-66028 Medium 6.7 Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Email 0.6%
  • CVE-2023-53876 Medium 5.1 Academy LMS 6.1 Arbitrary File Upload Vulnerability via Profile Settings 0.2%
  • CVE-2025-40992 Medium 5.1 Stored XSS in Creativeitem Sociopro 0.4%
  • CVE-2025-40991 Medium 5.1 Stored XSS in Creativeitem Ekushey CRM 0.2%
  • CVE-2025-40990 Medium 5.1 Stored XSS in Creativeitem Ekushey CRM 0.2%
  • CVE-2025-40989 Medium 5.1 Stored XSS in Creativeitem Ekushey CRM 0.2%
  • CVE-2025-27264 High 7.5 WordPress Doctor Appointment Booking Plugin <= 1.0.0 - Local File Inclusion vulnerability 0.8%
  • CVE-2025-27263 High 8.5 WordPress Doctor Appointment Booking Plugin <= 1.0.0 - SQL Injection vulnerability 0.5%
  • CVE-2023-3756 Low 3.5 Creativeitem Atlas Business Directory Listing search cross site scripting 0.4%
  • CVE-2023-3755 Low 3.5 Creativeitem Atlas Business Directory Listing filter_listings cross site scripting 0.4%
  • CVE-2023-3754 Low 3.5 Creativeitem Ekushey Project Manager CRM xxxxxxxx[random-msg-hash] cross site scripting 0.4%
  • CVE-2023-3753 Low 3.5 Creativeitem Mastery LMS browse cross site scripting 0.4%
  • CVE-2023-3752 Low 3.5 Creativeitem Academy LMS courses cross site scripting 0.4%