Vendors / Crew HRM Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Crew HRM records in CISA KEV No Crew HRM vulnerabilities are listed in CISA KEV.
Priority MEDIUM 41
Deserialization of Untrusted Data vulnerability in Crew HRM Crew HRM hr-management.This issue affects Crew HRM: from n/a through <= 1.1.1.
CVSS 3.1 CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.00439 · Published 2024-08-19 · No fix listed CWE-502
Priority LOW 20
The Employee, Leave and Recruitment Management System – Crew HRM plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.2.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00394 · Published 2026-07-09 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
Critical1 High0 Medium1 Low0 No CVSS0