All products

cm-custom-reports

WordPress · Plugin
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
CM Custom Reports <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin LabelsCVE-2026-2432 cm-custom-reports WordPress Medium Fix reported
CM Custom Reports <= 1.2.7 - Reflected Cross-Site Scripting via 'date_from' and 'date_to' ParametersCVE-2026-2431 cm-custom-reports WordPress Medium Fix reported