Vulnerabilities and security researches forcm-answers cm-answers

Jun 07, 2024

CVE, Research URL: CVE-2023-25992
Home page URL: Security reports for CM Answers – Powerful WordPress Forum Plugin
Application: CM Answers – Powerful WordPress Forum Plugin
Date: Mar 23, 2023
Research Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM Answers plugin <= 3.1.9 versions.
Affected versions: Min -, max -.
Status: vulnerable

Dec 15, 2024

CVE, Research URL: CVE-2024-54267
Home page URL: Security reports for CM Answers – Powerful WordPress Forum Plugin
Application: CM Answers – Powerful WordPress Forum Plugin
Date: Dec 13, 2024
Research Description: Missing Authorization vulnerability in CreativeMindsSolutions CM Answers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CM Answers: from n/a through 3.2.6.
Affected versions: Min -, max -.
Status: vulnerable

Apr 24, 2025

CVE, Research URL: CVE-2025-46246
Home page URL: Security reports for CM Answers – Powerful WordPress Forum Plugin
Application: CM Answers – Powerful WordPress Forum Plugin
Date: Apr 22, 2025
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM Answers allows Cross Site Request Forgery. This issue affects CM Answers: from n/a through 3.3.3.
Affected versions: Min -, max -.
Status: vulnerable