CVE-2024-5028

The CM WordPress Search And Replace Plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions prior to 1.3.9 . The root cause is a lack of CSRF checks in certain areas, which could enable an attacker to trick logged-in users into performing unwanted actions, such as a pl...

CVE-2023-31228

CVE-2023-31228 affects the CreativeMindsSolutions CM On Demand Search And Replace plugin for WordPress, specifically versions