WordPress plugin
CM Search And Replace – Optimize content edits with a powerful search and replace tool security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium7
- Low0
All CM Search And Replace – Optimize content edits with a powerful search and replace tool vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery ≤1.5.2Update to 1.5.3 | CVE-2025-54728 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤1.5.2Update to 1.5.3 | CVE-2025-54727 | |
| Medium4.3 | Missing Authorization ≤1.5.6Update to 1.5.7 | CVE-2025-54045 | |
| Medium6.1 | Reflected Cross-Site Scripting via cminds_free_guide Shortcode ≤1.4.2Update to 1.4.3 | CVE-2024-11202 | |
| Medium4.3 | Cross-Site Request Forgery to Plugin Setting Reset ≤1.3.8Update to 1.3.9 | CVE-2024-5028 | |
| Medium4.3 | Cross-Site Request Forgery ≤1.3.0Update to 1.3.1 | CVE-2023-28749 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤1.3.0Update to 1.3.1 | CVE-2023-31228 |
- Medium4.3Cross-Site Request Forgery
≤1.5.2Update to 1.5.3
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤1.5.2Update to 1.5.3
- Medium4.3Missing Authorization
≤1.5.6Update to 1.5.7
- Medium6.1Reflected Cross-Site Scripting via cminds_free_guide Shortcode
≤1.4.2Update to 1.4.3
- Medium4.3Cross-Site Request Forgery to Plugin Setting Reset
≤1.3.8Update to 1.3.9
- Medium4.3Cross-Site Request Forgery
≤1.3.0Update to 1.3.1
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤1.3.0Update to 1.3.1
CM Search And Replace – Optimize content edits with a powerful search and replace tool: common questions
Does CM Search And Replace – Optimize content edits with a powerful search and replace tool have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in CM Search And Replace – Optimize content edits with a powerful search and replace tool: 7 medium. None are known to affect version null.
How do I check which version of CM Search And Replace – Optimize content edits with a powerful search and replace tool I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent CM Search And Replace – Optimize content edits with a powerful search and replace tool vulnerability?
CVE-2025-54728, published Aug 14, 2025: CM On Demand Search And Replace <= 1.5.2 - Cross-Site Request Forgery. Severity: Medium (CVSS 4.3).
Is any CM Search And Replace – Optimize content edits with a powerful search and replace tool vulnerability listed in CISA KEV?
No. None of the known CM Search And Replace – Optimize content edits with a powerful search and replace tool vulnerabilities is currently listed in the CISA KEV catalog.