Security Risk <= 1.5.6 | WordPress.org

Resolved nonchiedercilaparola
(@nonchiedercilaparola)

2 months, 3 weeks ago

I would like to advice you that according to Patchstack and wordfence your last versione unsafe: “WordPress CM On Demand Search And Replace plugin <= 1.5.6 – Broken Access Control vulnerability
30.06.2025CVE-2025-54045″

Regards.

Viewing 4 replies - 1 through 4 (of 4 total)

Plugin Support johncminds
(@johncminds)

2 months, 3 weeks ago

We are not familiar with this issue and we also searched Weordefence.

Thread Starter nonchiedercilaparola
(@nonchiedercilaparola)

3 weeks, 6 days ago

please consider to evaluate patchstack https://patchstack.com/database/wordpress/plugin/cm-on-demand-search-and-replace/vulnerability/wordpress-cm-on-demand-search-and-replace-plugin-1-5-4-broken-access-control-vulnerability

lanxalot
(@lanxalot)

4 days, 22 hours ago

I saw this too. I’m wondering why the ticket is marked resolved?

Plugin Support johncminds
(@johncminds)

2 days, 10 hours ago

The vulnerability description was too vague to reproduce. We made several changes to the plugin and released a new version hoping this cover the issue

if not please describe the issue in more details

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.

4 replies
3 participants
Last reply from: johncminds
Last activity: 2 days, 10 hours ago
Status: resolved