cmsmasters vulnerabilities

7 published CVEs name cmsmasters among the affected products.

Critical 0High 4Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-25326
WordPress CMSMasters Content Composer plugin <= 1.4.5 - Local File Inclusion vulnerability
cmsmasters · CMSMasters Content Composer
High7.5
CVE-2026-23547
WordPress CMSMasters Content Composer plugin <= 2.5.8 - Broken Access Control vulnerability
cmsmasters · CMSMasters Content Composer
High7.1
CVE-2025-4414
WordPress CMSMasters Content Composer plugin < 2.5.7 - Local File Inclusion vulnerability
cmsmasters · CMSMasters Content Composer
High8.1
CVE-2025-0952
Eco Nature - Environment & Ecology WordPress Theme <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
cmsmasters · Eco Nature - Environment & Ecology WordPress Theme
High8.1
CVE-2025-0515
Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Option Update
cmsmasters · Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme
Medium4.3
CVE-2024-9694
CMSMasters Elementor Addon <= 1.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CMSMasters · CMSMasters Elementor Addon
Medium6.4
CVE-2024-7963
CMSMasters Content Composer <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
cmsmasters · CMSMasters Content Composer
Medium6.4