This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2024-5028 | BDVDB-2026-242554 Detail

CM WordPress Search And Replace Plugin

Description#

The CM WordPress Search And Replace Plugin WordPress plugin before 1.3.9 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-352 Cross-Site Request Forgery (CSRF)

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.