WordPress security by component

CRM

Plugin description

CRM is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 18, 2024; the highest CVE/CNA score is 8.8.

Plugin slug: crm-wordpress-plugin-repairbuddy

Latest vulnerability

CVE-2024-12259: CRM: Privilege escalation or authentication bypass

CRM is affected by privilege escalation or authentication bypass. Exploitation requires at least subscriber-level access. A successful request can grant permissions or access that the caller should not possess.

PublishedDec 18, 2024

Safe version guidanceSee mitigation notes

		Safe version
Dec 18, 2024	CVE-2024-12259 CRM: Privilege escalation or authentication bypass CRM is affected by privilege escalation or authentication bypass. Exploitation requires at least subscriber-level access. A successful request can grant permissions or access that the caller should not possess.	See mitigation notes	CVE8.8 NVDPending