Lucene search

Cm On Demand Search And Replace Security Vulnerabilities

cve

CVE-2023-28749

Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.

8.8CVSS

8.7AI Score

0.001EPSS

2023-11-22 01:15 PM

cve

CVE-2023-31228

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.

5.9CVSS

4.8AI Score

0.0005EPSS

2023-08-18 01:15 PM

cve

CVE-2024-5028

The CM WordPress Search And Replace Plugin WordPress plugin before 1.3.9 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

6.5CVSS

6.5AI Score

0.0004EPSS

2024-07-13 06:15 AM