Skip to content
OpenAdvisories

Vendor

contentmx

2 known vulnerabilities.

Products

ContentMX Content Publisher 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-9889

    ContentMX Content Publisher <= 1.0.6 - Cross-Site Request Forgery

    The ContentMX Content Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the cmx_activate_connection function. This makes it possible …

    contentmx ContentMX Content Publisher Web / CMS
  • Medium 5.4
    CVE-2025-31555

    WordPress ContentMX Content Publisher plugin <= 1.0.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ContentMX ContentMX Content Publisher contentmx-content-publisher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ContentMX Content Publisher: from n/a through <= 1.0.6.

    contentmx ContentMX Content Publisher