Read the docs

Wp-crm

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Wp-crm records in CISA KEV

No Wp-crm vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp-crm System 1 record LOW

Records

1 record in Wp-crm System · all components

TI-2025-30126 CVE-2025-47629 · GHSA-q2pw-vm7h-xm59

WordPress WP-CRM System plugin <= 3.4.5 - PHP Object Injection vulnerability

Priority LOW 34

Deserialization of Untrusted Data vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Object Injection.This issue affects WP-CRM System: from n/a through <= 3.4.5.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00582 Published 2025-05-07 No fix listed CWE-502
Open these records in search →