Read the docs

nofearinc

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

nofearinc records in CISA KEV

No nofearinc vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-13549 CVE-2025-14854 · GHSA-94q2-fvxr-659j

Missing authorization in nofearinc WP-CRM System – Manage Clients and Projects

Priority LOW 24

The WP-CRM System plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on the wpcrm_get_email_recipients and wpcrm_system_ajax_task_change_status AJAX functions in all versions up to…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00246 Published 2026-01-14 No fix listed CWE-862
TI-2026-07917 CVE-2026-9004 · GHSA-c4f5-f4rw-hrjw

WP-CRM System <= 3.4.6 - Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter

Priority LOW 20

The WP-CRM System – Manage Clients and Projects plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.6 via the 'contact_id' parameter.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00373 Published 2026-09-22 No fix listed CWE-200
Open these records in search →