Vendor
Cmoreira
6 known vulnerabilities in products by Cmoreira, 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Medium | CVE-2024-3681 | Interactive World Maps <= 2.4.14 - Reflected Cross-Site Scripting | 6.1 | |
| High | CVE-2025-49245 | Cmoreira Testimonials Showcase: Cross-site Scripting | 7.1 | |
| High | CVE-2025-49247 | WordPress Team Showcase plugin < 25.05.13 - Reflected Cross Site Scripting (XSS) vulnerability | 7.1 | |
| Medium | CVE-2025-49250 | WordPress Team Showcase plugin < 25.05.13 - Arbitrary Shortcode Execution vulnerability | 4.3 | |
| Medium | CVE-2025-49246 | WordPress Testimonials Showcase plugin <= 1.9.16 - Broken Access Control Vulnerability | 4.3 | |
| Medium | CVE-2025-49248 | WordPress Team Showcase plugin < 25.05.13 - Broken Access Control Vulnerability | 4.3 |
Products
| Product | CVEs | Actively exploited |
|---|---|---|
| Team Showcase | 3 | 0 |