Plugin icon

WP-CRM System – Manage Clients and Projects

wp-crm-system

Vulnerabilities:

8

Last Updated:

September 28, 2026

Active Installs:

700

Published
Title
Fixed in
CVSS
Published
2026-09-21
Title
WP-CRM System < 3.4.7 - Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter
Fixed in
Fixed in 3.4.7
CVSS
2.7 (low)
Published
2026-01-13
Title
WP-CRM System – Manage Clients and Projects < 3.4.6 - Missing Authorization to Authenticated (Subscriber+) CRM Data Exposure and Task Modification
Fixed in
Fixed in 3.4.6
CVSS
5.4 (medium)
Published
2025-12-08
Title
WP-CRM System < 3.4.7 - Missing Authorization
Fixed in
Fixed in 3.4.7
CVSS
5.3 (medium)
Published
2025-11-04
Title
WP-CRM System < 3.4.6 - Missing Authorization
Fixed in
Fixed in 3.4.6
CVSS
4.3 (medium)
Published
2025-06-05
Title
WP-CRM System < 3.4.3 - Missing Authorization
Fixed in
Fixed in 3.4.3
CVSS
5.3 (medium)
Published
2025-05-07
Title
WP-CRM System < 3.4.6 - Authenticated (Administrator+) PHP Object Injection
Fixed in
Fixed in 3.4.6
CVSS
7.2 (high)
Published
2024-12-14
Title
WP-CRM System < 3.4.0 - Unauthenticated Duplicate Contact Settings Update
Fixed in
Fixed in 3.4.0
CVSS
5.3 (medium)
Published
2024-03-28
Title
WP-CRM System < 3.2.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.9.1
CVSS
4.4 (medium)