Skip to content
OpenAdvisories

Vendor

CreativeMindsSolutions

31 known vulnerabilities.

Products

CM On Demand Search And Replace 5 CM Tooltip Glossary 4 CM Business Directory – Optimise and showcase local business 3 CM Answers 3 CM Custom Reports – Flexible reporting to track what matters most 2 CM E-Mail Blacklist – Simple email filtering for safer registration 2 CM Pop-Up banners 2 CM Map Locations 2 CM Popup Plugin for WordPress 1 CM Registration and Invitation Codes 1 CM FAQ – Simplify support with an intuitive FAQ management tool 1 CM Registration – Tailored tool for seamless login and invitation-based registrations 1 CM Map Locations – Visualize and share your locations in a few clicks 1 CM Ad Changer 1 CM Header and Footer – Add custom scripts and styles to your header and footer with ease 1 CM Search And Replace – Optimize content edits with a powerful search and replace tool 1 CM Pop-Up – Create engaging popups to capture attention and boost interaction 1 CM Video Lessons Manager – Simplify video lessons management for better education 1 CM Business Directory 1 CM Header and Footer 1 CM Download Manager 1 CM Ad Changer – A simple tool to control and optimize your site's banners 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2026-16601

    CM Map Locations <= 2.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action

    The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 2.1.8 via the uploadMedia function. This is due to insufficient file type valid…

    CreativeMindsSolutions CM Map Locations – Visualize and share your locations in a few clicks Web / CMS
  • High 7.1
    CVE-2025-48151

    WordPress CM Map Locations <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM Map Locations cm-map-locations allows Reflected XSS.This issue affects CM Map Locations: from n/a through <= 2.1.6.

    CreativeMindsSolutions CM Map Locations
  • High 8.6
    CVE-2025-30910

    WordPress CM Download Manager plugin <= 2.9.6 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CreativeMindsSolutions CM Download Manager cm-download-manager allows Path Traversal.This issue affects CM Download Manager: from n/a through <= 2.9.6.

    CreativeMindsSolutions CM Download Manager
  • High 7.1
    CVE-2025-24694

    WordPress CM Pop-Up Banners plugin <= 1.7.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM Pop-Up banners cm-pop-up-banners allows Reflected XSS.This issue affects CM Pop-Up banners: from n/a through <= 1.7.6.

    CreativeMindsSolutions CM Pop-Up banners
  • High 7.1
    CVE-2025-24758

    WordPress CM Map Locations plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM Map Locations cm-map-locations allows Reflected XSS.This issue affects CM Map Locations: from n/a through <= 2.0.8.

    CreativeMindsSolutions CM Map Locations
  • High 8.5
    CVE-2023-30750

    WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeMindsSolutions CM Popup Plugin for WordPress.This issue affects CM Popup Plugin for WordPress: from n/a through 1.5.10.

    CreativeMindsSolutions CM Popup Plugin for WordPress Web / CMS