Cmsmasters vulnerabilities
We track 4 vulnerabilities in Cmsmasters products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on February 19, 2026.
Latest Cmsmasters vulnerabilities
- 7.5 High severity
CMSMasters Content Composer: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows PHP Local File Inclusion.This issue affects CMSMasters Content Co
- 7.1 High severity
CMSMasters Content Composer: Missing Authorization
Missing Authorization vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CMSMasters Content Composer: from n/a through <= 2.5.8.
- 8.1 High severity
CMSMasters Content Composer: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows PHP Local File Inclusion.This issue affects CMSMasters Content Co
- 8.1 High severity
Eco Nature - Environment & Ecology WordPress…: Missing Authorization
The Eco Nature - Environment & Ecology WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'cmsmasters_hide_admin_notice' AJAX action in all versio