Medium · 4.3 CVE-2023-28749 EUVD-2023-32387GHSA-frr4-p742-xj9m

WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Published Nov 22, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.

Vendor	Product	Affected	Fixed
CreativeMindsSolutions	CM On Demand Search And Replace	≤ 1.3.0	—