CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-9129

Cross-site request forgery (CSRF) vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the addons_title parameter in the CMDM_admin_settings page to wp-admin/admin.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 49.4%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2014-9129

Cminds » Cm Download Manager » Version: 1.0

cpe:2.3:a:cminds:cm_download_manager:1.0
Cminds » Cm Download Manager » Version: 1.0.2

cpe:2.3:a:cminds:cm_download_manager:1.0.2
Cminds » Cm Download Manager » Version: 1.0.3

cpe:2.3:a:cminds:cm_download_manager:1.0.3
Cminds » Cm Download Manager » Version: 1.1

cpe:2.3:a:cminds:cm_download_manager:1.1
Cminds » Cm Download Manager » Version: 1.2

cpe:2.3:a:cminds:cm_download_manager:1.2
Cminds » Cm Download Manager » Version: 1.3

cpe:2.3:a:cminds:cm_download_manager:1.3
Cminds » Cm Download Manager » Version: 1.3.3

cpe:2.3:a:cminds:cm_download_manager:1.3.3
Cminds » Cm Download Manager » Version: 1.3.5

cpe:2.3:a:cminds:cm_download_manager:1.3.5
Cminds » Cm Download Manager » Version: 1.3.6

cpe:2.3:a:cminds:cm_download_manager:1.3.6
Cminds » Cm Download Manager » Version: 1.5.2

cpe:2.3:a:cminds:cm_download_manager:1.5.2
Cminds » Cm Download Manager » Version: 1.5.3

cpe:2.3:a:cminds:cm_download_manager:1.5.3
Cminds » Cm Download Manager » Version: 1.5.5

cpe:2.3:a:cminds:cm_download_manager:1.5.5
Cminds » Cm Download Manager » Version: 1.5.6

cpe:2.3:a:cminds:cm_download_manager:1.5.6
Cminds » Cm Download Manager » Version: 1.5.7

cpe:2.3:a:cminds:cm_download_manager:1.5.7
Cminds » Cm Download Manager » Version: 1.5.8

cpe:2.3:a:cminds:cm_download_manager:1.5.8
Cminds » Cm Download Manager » Version: 1.6.0

cpe:2.3:a:cminds:cm_download_manager:1.6.0
Cminds » Cm Download Manager » Version: 1.6.1

cpe:2.3:a:cminds:cm_download_manager:1.6.1
Cminds » Cm Download Manager » Version: 1.6.2

cpe:2.3:a:cminds:cm_download_manager:1.6.2
Cminds » Cm Download Manager » Version: 1.6.3

cpe:2.3:a:cminds:cm_download_manager:1.6.3
Cminds » Cm Download Manager » Version: 1.6.5

cpe:2.3:a:cminds:cm_download_manager:1.6.5
Cminds » Cm Download Manager » Version: 1.6.7

cpe:2.3:a:cminds:cm_download_manager:1.6.7
Cminds » Cm Download Manager » Version: 1.7.2

cpe:2.3:a:cminds:cm_download_manager:1.7.2
Cminds » Cm Download Manager » Version: 1.8.0

cpe:2.3:a:cminds:cm_download_manager:1.8.0
Cminds » Cm Download Manager » Version: 1.8.1

cpe:2.3:a:cminds:cm_download_manager:1.8.1
Cminds » Cm Download Manager » Version: 1.9.4

cpe:2.3:a:cminds:cm_download_manager:1.9.4
Cminds » Cm Download Manager » Version: 1.9.5

cpe:2.3:a:cminds:cm_download_manager:1.9.5
Cminds » Cm Download Manager » Version: 2.0.4

cpe:2.3:a:cminds:cm_download_manager:2.0.4
Cminds » Cm Download Manager » Version: 2.0.6

cpe:2.3:a:cminds:cm_download_manager:2.0.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-9129

Products

Pricing

Contact Us