Cm Answers Vulnerabilities

The CM Answers – Easy-to-use forum to grow your WP community plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.3. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized a...

CVSS:

4.3

Affected:

up to 3.3.3

Fixed in:

3.3.4

Disclosed:

Apr 22, 2025

CVE-2025-46246 on NVD →

The CM Answers – Powerful WordPress Forum Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.2.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized a...

CVSS:

4.3

Affected:

up to 3.2.6

Fixed in:

3.2.7

Disclosed:

Dec 10, 2024

CVE-2024-54267 on NVD →

The CM Answers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator-level access, and above, to inject arbitrary web s...

CVSS:

4.4

Affected:

up to 3.1.9

Fixed in:

3.2.0

Disclosed:

Feb 23, 2023

CVE-2023-25992 on NVD →