CMS Commander – Manage Multiple Sites

Vulnerabilities 4Slug cms-commander-clientLatest version 2.288WordPress.org →Closed

N/A Unfixed Closed

2026-03-20≤ 2.288

CMS Commander <= 2.288 - Authenticated (Custom+) SQL Injection via 'or_blogname' Parameter

Critical 9.8 Closed

2023-06-20< 2.288

CVE-2023-3325

N/A Closed

2016-06-01< 2.22

CMS Commander – Manage Multiple Sites Plugin <= 2.21 - PHP Object Injection

N/A Closed

< 2.22

CMS Commander Client <= 2.21 - Unauthenticated PHP Object Injection