WordPress plugin
CM Custom Reports – Flexible reporting to track what matters most security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All CM Custom Reports – Flexible reporting to track what matters most vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Labels ≤1.2.7Update to 1.2.8 | CVE-2026-2432 | |
| Medium6.1 | Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameters ≤1.2.7Update to 1.2.8 | CVE-2026-2431 |
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Labels
≤1.2.7Update to 1.2.8
- Medium6.1Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameters
≤1.2.7Update to 1.2.8
CM Custom Reports – Flexible reporting to track what matters most: common questions
Does CM Custom Reports – Flexible reporting to track what matters most have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in CM Custom Reports – Flexible reporting to track what matters most: 2 medium. None are known to affect version null.
How do I check which version of CM Custom Reports – Flexible reporting to track what matters most I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent CM Custom Reports – Flexible reporting to track what matters most vulnerability?
CVE-2026-2432, published Mar 19, 2026: CM Custom Reports <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Labels. Severity: Medium (CVSS 4.4).
Is any CM Custom Reports – Flexible reporting to track what matters most vulnerability listed in CISA KEV?
No. None of the known CM Custom Reports – Flexible reporting to track what matters most vulnerabilities is currently listed in the CISA KEV catalog.