Cminds vulnerabilities
We track 2 vulnerabilities in Cminds products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2024.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest Cminds vulnerabilities
- 8.1 High severity
CM Email Registration Blacklist and Whitelist: Cross-Site Request Forgery
The CM Email Registration Blacklist and Whitelist WordPress plugin before 1.4.9 does not have CSRF check when adding or deleting an item from the blacklist or whitelist, which could allow attackers to make a logged in admin add or delete settings from the blac
- 8.1 High severity
CM Popup Plugin for WordPress: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeMindsSolutions CM Popup Plugin for WordPress.This issue affects CM Popup Plugin for WordPress: from n/a through 1.5.10.