Skip to content
Noroxi

WP-CRM System

wp-crm-system · plugin

Known security vulnerabilities for WP-CRM System. Find out in seconds which version runs on your site with WP Lens.

8 known vulnerabilities

latest Sep 22, 2026

Vulnerabilities

  • CVE-2025-47629

    WordPress WP-CRM System plugin <= 3.4.5 - PHP Object Injection vulnerability

    High 7.2

  • CVE-2024-55991

    WordPress CRM Plugin – WP-CRM System plugin <= 3.2.9.1 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2024-30434

    WordPress WP-CRM System plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability

    Medium 5.9

  • CVE-2025-62106

    WordPress WP-CRM System plugin <= 3.4.5 - Broken Access Control vulnerability

    Medium 5.4

  • CVE-2025-14854

    WP-CRM System – Manage Clients and Projects <= 3.4.5 - Missing Authorization to Authenticated (Subscriber+) CRM Data Exposure and Task Modification

    Medium 5.4

  • CVE-2025-62740

    WordPress WP-CRM System plugin <= 3.4.6 - Broken Access Control vulnerability

    Medium 5.3

  • CVE-2025-49270

    WordPress WP-CRM System plugin <= 3.4.2 - Broken Access Control Vulnerability

    Medium 5.3

  • CVE-2026-9004

    WP-CRM System <= 3.4.6 - Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter

    Medium 4.3

← Back to directory