PatchTheCVEcminds vulnerabilities
Recent CVEs affecting cminds products. 5 tracked.
cminds has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-05-15. Highest priority: CVE-2024-5026 (score 28/100).
- CVE-2025-46246 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM Answers cm-answers allows Cross S
- CVE-2025-46245 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM Ad Changer cm-ad-changer allows C
- CVE-2024-5030 LOW 3.8 UPGRADE The CM Table Of Contents WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its s
- CVE-2024-5029 MEDIUM 4.8 UPGRADE The CM Table Of Contents WordPress plugin before 1.2.4 does not have CSRF check when updating its settings, a
- CVE-2024-5026 MEDIUM 4.8 UPGRADE The CM Tooltip Glossary WordPress plugin before 4.3.4 does not sanitise and escape some of its settings, which
FAQ
How do I fix cminds vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cminds being exploited right now?
None of the tracked cminds CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cminds CVE should I patch first?
CVE-2024-5026 currently ranks highest (28/100): The CM Tooltip Glossary WordPress plugin before 4.3.4 does not sanitise and escape some of its settings, which.