CreativeMindsSolutions vulnerabilities

CVEs per yearBy the year they were published

1. 20234
2. 20245
3. 202515
4. 20267

Newest CVEs

• CVE-2026-16601

  CM Map Locations <= 2.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action

  creativemindssolutions · CM Map Locations – Visualize and share your locations in a few clicks

  High8.8
• CVE-2026-8892

  CM Business Directory <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Business Address Meta Fields

  creativemindssolutions · CM Business Directory – Optimise and showcase local business

  Medium6.4
• CVE-2026-9236

  CM Ad Changer <= 2.0.7 - Cross-Site Request Forgery to Campaign Deletion via Campaign Management

  creativemindssolutions · CM Ad Changer – A simple tool to control and optimize your site's banners

  Medium4.3
• CVE-2026-2432

  CM Custom Reports <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Labels

  creativemindssolutions · CM Custom Reports – Flexible reporting to track what matters most

  Medium4.4
• CVE-2026-2431

  CM Custom Reports <= 1.2.7 - Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameters

  creativemindssolutions · CM Custom Reports – Flexible reporting to track what matters most

  Medium6.1
• CVE-2026-25004

  WordPress CM Business Directory plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability

  CreativeMindsSolutions · CM Business Directory

  Medium5.9
• CVE-2026-0691

  CM E-Mail Blacklist <= 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'black_email' Parameter

  creativemindssolutions · CM E-Mail Blacklist – Simple email filtering for safer registration

  Medium4.4
• CVE-2025-54045

  WordPress CM On Demand Search And Replace plugin <= 1.5.5 - Broken Access Control vulnerability

  CreativeMindsSolutions · CM On Demand Search And Replace

  Medium4.3
• CVE-2025-11167

  CM Registration – Tailored tool for seamless login and invitation-based registrations <= 2.5.6 - Open Redirect

  creativemindssolutions · CM Registration – Tailored tool for seamless login and invitation-based registrations

  Medium4.7
• CVE-2025-10178

  CM Business Directory <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

  creativemindssolutions · CM Business Directory – Optimise and showcase local business

  Medium6.4