CMS Commander vulnerabilities

1 known vulnerability in CMS Commander from Cmscommander. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  CMS Commander – Manage Multiple Sites: Insufficient Entropy

  CVE-2023-3325Jun 20, 2023Thoefter

  The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an insufficiently unique cryptographic signature on the 'cmsc_add_site' function in versions up to, and including, 2.287. This makes it possible for unauthenticated