Advisories · Technology

CreativeMindsSolutions CM On Demand Search And Replace.

Every CVE that names CreativeMindsSolutions CM On Demand Search And Replace among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-54045 CVE record

CVSS 4.3 Medium

WordPress CM On Demand Search And Replace plugin <= 1.5.5 - Broken Access Control vulnerability
- CreativeMindsSolutions CM On Demand Search And Replace
- Broken access control
Not analysed yet 16 Dec 2025
CVE-2025-54727 CVE record

CVSS 5.9 Medium

WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability
- CreativeMindsSolutions CM On Demand Search And Replace
- Cross-site scripting (XSS)
Not analysed yet 14 Aug 2025
CVE-2025-54728 CVE record

CVSS 4.3 Medium

WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) Vulnerability
- CreativeMindsSolutions CM On Demand Search And Replace
- Cross-site request forgery (CSRF)
Not analysed yet 14 Aug 2025
CVE-2023-28749 CVE record

CVSS 4.3 Medium

WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CreativeMindsSolutions CM On Demand Search And Replace
- Cross-site request forgery (CSRF)
Not analysed yet 22 Nov 2023
CVE-2023-31228 CVE record

CVSS 5.9 Medium

WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
- CreativeMindsSolutions CM On Demand Search And Replace
- Cross-site scripting (XSS)
Not analysed yet 18 Aug 2023