CM Search And Replace
Healthy: maintained, last release 13 Oct 2026, 11 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 80 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is CM Search And Replace still maintained?
- Yes. Last release 13 Oct 2026, 11 releases in the last 24 months. 13 Oct 2026 · wordpress.org
- Who owns CM Search And Replace, and has it changed hands?
- No change recorded. Main committer CreativeMindsSolutions since Mar 2015. 3 Nov 2026 · SVN log
- Was CM Search And Replace removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is CM Search And Replace safe?
- 7 known vulnerabilities, all fixed (latest in 1.5.3). Not on the exploited list. 14 Aug 2025 · Wordfence Intelligence
- Is the latest CM Search And Replace update safe to install?
- No ownership change before 1.5.7. No one-star spike after it. 23 May 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| CreativeMindsSolutions | 25 Mar 2015 to 13 Oct 2026, 321 commits |
|---|
1 committer recorded. No ownership change since 2015.
Maintenance
- Last release
- 22 days ago
- Releases, 24 months
- 11
- Tested up to
- 7.0 vs 7.1
- Requires PHP
- 5.2.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 2 |
| Q2 2025 | 6 |
| Q3 2025 | 2 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 1 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 13 Oct 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 4.2.
| 5 star | 12 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 3 |
Security record
4 vulnerabilities in 24 months (7 on record), all patched (latest fixed in 1.5.3).
Show 7 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 14 Aug 2025 | CM On Demand Search And Replace <= 1.5.2 - Cross-Site Request Forgery | 4.3 | <= 1.5.2 | 1.5.3 | Patched before disclosure |
| 14 Aug 2025 | CM On Demand Search And Replace <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting | 4.4 | <= 1.5.2 | 1.5.3 | Patched before disclosure |
| 30 Jun 2025 | CM On Demand Search And Replace <= 1.5.6 - Missing Authorization | 4.3 | <= 1.5.6 | 1.5.7 | n/a |
| 25 Nov 2024 | Multiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcode | 6.1 | <= 1.4.2 | 1.4.3 | n/a |
| 22 Jul 2024 | CM WordPress Search And Replace Plugin <= 1.3.8 - Cross-Site Request Forgery to Plugin Setting Reset | 4.3 | <= 1.3.8 | 1.3.9 | n/a |
| 9 May 2023 | CM On Demand Search And Replace <= 1.3.0 - Cross-Site Request Forgery | 4.3 | <= 1.3.0 | 1.3.1 | n/a |
| 28 Apr 2023 | CM On Demand Search And Replace <= 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting | 4.4 | <= 1.3.0 | 1.3.1 | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
100% of 1 support threads resolved in the last 2 months.
Momentum
2,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 60 |
|---|---|
| 11 May 2026 | 119 |
| 18 May 2026 | 1,145 |
| 25 May 2026 | 449 |
| 1 Jun 2026 | 212 |
| 8 Jun 2026 | 164 |
| 15 Jun 2026 | 124 |
| 22 Jun 2026 | 141 |
| 29 Jun 2026 | 119 |
| 6 Jul 2026 | 279 |
| 13 Jul 2026 | 132 |
| 20 Jul 2026 | 132 |
| 27 Jul 2026 | 148 |
| 3 Aug 2026 | 136 |
| 10 Aug 2026 | 130 |
| 17 Aug 2026 | 153 |
| 24 Aug 2026 | 140 |
| 31 Aug 2026 | 143 |
| 7 Sep 2026 | 131 |
| 14 Sep 2026 | 163 |
| 21 Sep 2026 | 157 |
| 28 Sep 2026 | 176 |
| 5 Oct 2026 | 171 |
| 12 Oct 2026 | 1,236 |
| 19 Oct 2026 | 410 |
| 26 Oct 2026 | 478 |
| 2 Nov 2026 | 58 |
Weekly downloads over the last 4 weeks are 113% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 1.5.7 |
|---|---|
| Author | CreativeMindsSolutions |
| Added | 25 Mar 2015 |
| Last updated | 13 Oct 2026 |
| Active installs | 2,000+ |
| Requires WordPress | 5.4.0 |
| Tested up to | 7.0.8 |
| Requires PHP | 5.2.4 |
| Category | Site Administration & Utilities > URL Redirects & 301 Management |
| Tags | find, replace, database, search replace, search and replace |
Other plugins by this author: CM Pop-Up - Create engaging popups to capture attention and boost interaction, CM Tooltip Glossary, CM Header and Footer - Add custom scripts and styles to your header and footer with ease, CM E-Mail Blacklist - Simple email filtering for safer registration, CM Answers - Discussion Forum Plugin for WordPress Q&A, CM Download Manager - Organize, Protect & Share Files in WordPress, CM Ad Changer - A simple tool to control and optimize your site’s banners, CM Table Of Contents - Clear navigation for better content discovery, CM Footnotes - Boost your content’s credibility with footnotes, citations, and bibliography, CM Custom Reports - Flexible reporting to track what matters most, CM Curated List Manager - Effortless tool for link management, CM Map Locations - Visualize and share your locations in a few clicks
Questions
Is CM Search And Replace still maintained?
Yes. Last release 13 Oct 2026, 11 releases in the last 24 months.
Who owns CM Search And Replace, and has it changed hands?
No change recorded. Main committer CreativeMindsSolutions since Mar 2015.
Was CM Search And Replace removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is CM Search And Replace safe?
7 known vulnerabilities, all fixed (latest in 1.5.3). Not on the exploited list.
Is the latest CM Search And Replace update safe to install?
No ownership change before 1.5.7. No one-star spike after it.