CreativeMindsSolutions vulnerabilities
31 published CVEs name CreativeMindsSolutions among the affected products.
- 31Published CVEs31 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-16601
CM Map Locations <= 2.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action
creativemindssolutions · CM Map Locations – Visualize and share your locations in a few clicks
High8.8 - CVE-2026-8892
CM Business Directory <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Business Address Meta Fields
creativemindssolutions · CM Business Directory – Optimise and showcase local business
Medium6.4 - CVE-2026-9236
CM Ad Changer <= 2.0.7 - Cross-Site Request Forgery to Campaign Deletion via Campaign Management
creativemindssolutions · CM Ad Changer – A simple tool to control and optimize your site's banners
Medium4.3 - CVE-2026-2432
CM Custom Reports <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Labels
creativemindssolutions · CM Custom Reports – Flexible reporting to track what matters most
Medium4.4 - CVE-2026-2431
CM Custom Reports <= 1.2.7 - Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameters
creativemindssolutions · CM Custom Reports – Flexible reporting to track what matters most
Medium6.1 - CVE-2026-25004
WordPress CM Business Directory plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability
CreativeMindsSolutions · CM Business Directory
Medium5.9 - CVE-2026-0691
CM E-Mail Blacklist <= 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'black_email' Parameter
creativemindssolutions · CM E-Mail Blacklist – Simple email filtering for safer registration
Medium4.4 - CVE-2025-54045
WordPress CM On Demand Search And Replace plugin <= 1.5.5 - Broken Access Control vulnerability
CreativeMindsSolutions · CM On Demand Search And Replace
Medium4.3 - CVE-2025-11167
CM Registration – Tailored tool for seamless login and invitation-based registrations <= 2.5.6 - Open Redirect
creativemindssolutions · CM Registration – Tailored tool for seamless login and invitation-based registrations
Medium4.7 - CVE-2025-10178
CM Business Directory <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
creativemindssolutions · CM Business Directory – Optimise and showcase local business
Medium6.4