Filtered by vendor Creativemindssolutions Subscriptions
Filtered by product Cm Pop-up Banners Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-54018 2 Creativemindssolutions, Wordpress 2 Cm Pop-up Banners, Wordpress 2025-07-21 4.3 Medium
Missing Authorization vulnerability in CreativeMindsSolutions CM Pop-Up banners allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CM Pop-Up banners: from n/a through 1.8.4.
CVE-2024-5799 2 Cminds, Creativemindssolutions 2 Cm Popup, Cm Pop-up Banners 2024-09-26 4.8 Medium
The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.