Skip to content
OpenAdvisories

Vendor

thoefter

2 known vulnerabilities.

Products

CMS Commander – Manage Multiple Sites 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-3334

    CMS Commander <= 2.288 - Authenticated (Custom+) SQL Injection via 'or_blogname' Parameter

    The CMS Commander plugin for WordPress is vulnerable to SQL Injection via the 'or_blogname', 'or_blogdescription', and 'or_admin_email' parameters in all versions up to, and including, 2.288. This is due to insufficient escaping on the user supplied parameter…

    thoefter CMS Commander – Manage Multiple Sites Web / CMS
  • High 8.1
    CVE-2023-3325

    CMS Commander <= 2.287 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature

    The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an insufficiently unique cryptographic signature on the 'cmsc_add_site' function in versions up to, and including, 2.287. This makes it possible for unauthenticated…

    thoefter CMS Commander – Manage Multiple Sites Web / CMS