Approved changes feed: RSS · Atom

cpe:2.3:a:creativemindssolutions:cm_on_demand_search_and_replace:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCreativemindssolutions (f7222e7b-b519-5ad4-b066-3dcd3dd3d11b)
ProductCm On Demand Search And Replace (c2e501c6-f53f-50eb-88e3-5799dd1779da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-54728 vulnerable 2026-06-03 15:04:56.620146 WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) Vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace cm-on-demand-search-and-replace allows Cross Site Request Forgery.This issue affects CM On Demand Search And Replace: from n/a through <= 1.5.2.
Published: 2025-08-14T18:21:43.685Z
Updated: 2026-04-28T16:13:36.872Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54727 vulnerable 2026-06-03 15:04:56.619779 WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM On Demand Search And Replace cm-on-demand-search-and-replace allows Stored XSS.This issue affects CM On Demand Search And Replace: from n/a through <= 1.5.2.
Published: 2025-08-14T18:21:45.295Z
Updated: 2026-04-28T16:13:36.619Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54045 vulnerable 2026-06-03 15:03:55.496615 WordPress CM On Demand Search And Replace plugin <= 1.5.5 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in CreativeMindsSolutions CM On Demand Search And Replace cm-on-demand-search-and-replace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CM On Demand Search And Replace: from n/a through <= 1.5.5.
Published: 2025-12-16T08:12:46.351Z
Updated: 2026-04-28T16:13:29.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31228 vulnerable 2026-06-03 14:51:55.088214 WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.
Published: 2023-08-18T12:57:43.899Z
Updated: 2026-04-28T16:08:21.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28749 vulnerable 2026-06-03 14:51:37.385963 WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.
Published: 2023-11-22T13:02:55.222Z
Updated: 2026-04-28T16:08:16.639Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.