Input validation vulnerability in CM Search And Replace – Optimize content edits with a powerful search and replace tool 1.5.2

The CM Search And Replace plugin for WordPress, which helps with finding and replacing content, has a security issue. This issue, called Cross-Site Request Forgery, affects all versions up to 1.5.2. The problem is that the plugin does not properly check for a special code that helps prevent unauthorized actions. This means that someone who is not logged in to the site could trick an administrator into doing something they shouldn’t, like clicking on a harmful link.

Detected in:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.