CMSMasters
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CMSMasters Content Composer | 4 | – | Feb 19, 2026 |
| Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme | 1 | – | Jan 18, 2025 |
| CMSMasters Elementor Addon | 1 | – | Dec 3, 2024 |
| Eco Nature - Environment & Ecology WordPress Theme | 1 | – | Mar 14, 2025 |
Exploited and recent CVEs
- CVE-2026-25326 WordPress CMSMasters Content Composer plugin <= 1.4.5 - Local File Inclusion vulnerability 0.4%
- CVE-2026-23547 WordPress CMSMasters Content Composer plugin <= 2.5.8 - Broken Access Control vulnerability 0.2%
- CVE-2025-4414 WordPress CMSMasters Content Composer plugin < 2.5.7 - Local File Inclusion vulnerability 0.6%
- CVE-2025-0952 Eco Nature - Environment & Ecology WordPress Theme <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update 0.3%
- CVE-2025-0515 Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Option Update 0.2%
- CVE-2024-9694 CMSMasters Elementor Addon <= 1.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.3%
- CVE-2024-7963 CMSMasters Content Composer <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%