Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2023-30750

WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeMindsSolutions CM Popup Plugin for WordPress.This issue affects CM Popup Plugin for WordPress: from n/a through 1.5.10.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Cminds
Products
Cm Popup
CVE-2024-5004

CM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS

The CM Popup Plugin for WordPress WordPress plugin before 1.6.6 does not sanitise and escape some of the campaign settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Cminds
Products
Cm Popup
CVE-2024-5799

CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS

The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Cminds Creativemindssolutions
Products
Cm Popup Cm Pop-up Banners