PatchTheCVEcm-wp vulnerabilities
Recent CVEs affecting cm-wp products. 4 tracked.
cm-wp has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-05-15. Highest priority: CVE-2024-10149 (score 28/100).
- CVE-2025-0717 LOW 3.5 UPGRADE To exploit the vulnerability, it is necessary:
- CVE-2024-13338 MEDIUM 5.3 UPGRADE The Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulner
- CVE-2024-13337 MEDIUM 4.3 UPGRADE The Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulner
- CVE-2024-10149 MEDIUM 4.8 UPGRADE The Social Slider Feed WordPress plugin before 2.2.9 does not sanitise and escape some of its settings, which
FAQ
How do I fix cm-wp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cm-wp being exploited right now?
None of the tracked cm-wp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cm-wp CVE should I patch first?
CVE-2024-10149 currently ranks highest (28/100): The Social Slider Feed WordPress plugin before 2.2.9 does not sanitise and escape some of its settings, which .