Cmscommander vulnerabilities
We track 1 vulnerability in Cmscommander products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 20, 2023.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Cmscommander vulnerabilities
- 9.8 Critical severity
CMS Commander – Manage Multiple Sites: Insufficient Entropy
The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an insufficiently unique cryptographic signature on the 'cmsc_add_site' function in versions up to, and including, 2.287. This makes it possible for unauthenticated