dripadmin

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

dripadmin records in CISA KEV

No dripadmin vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-12176 CVE-2025-13313 · GHSA-84m3-gv37-m8q2

Missing authorization in dripadmin CRM Memberships

MEDIUM 50

The CRM Memberships plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 2.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00581 Published 2025-12-05 No fix listed CWE-862

TI-2025-12175 CVE-2025-13312 · GHSA-r7px-4869-mhc2

CRM Memberships <= 2.5 - Missing Authorization to Unauthenticated 'ntzcrm_add_new_tag' AJAX Action

LOW 30

The CRM Memberships plugin for WordPress is vulnerable to unauthorized membership tag creation due to a missing capability check on the 'ntzcrm_add_new_tag' function in all versions up to, and including, 2.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00289 Published 2025-12-05 No fix listed CWE-862

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0