Vulnerabilities

TI-2025-23046 CVE-2025-31909 · GHSA-q9p4-73jm-wjh3

WordPress Apptivo Business Site CRM plugin <= 5.3 - Arbitrary Content Deletion vulnerability

LOW 39

Missing Authorization vulnerability in Apptivo Apptivo Business Site CRM apptivo-business-site allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Apptivo Business Site CRM: from n/…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00393 Published 2025-04-03 No fix listed CWE-862

TI-2024-12447 CVE-2024-13405 · GHSA-98vh-gq6f-2f4h

Apptivo Business Site CRM <= 5.3 - Cross-Site Request Forgery to IP Address Block

LOW 19

The Apptivo Business Site CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00183 Published 2025-02-19 No fix listed CWE-352

TI-2022-21919 CVE-2022-44582 · GHSA-xjhw-7765-363q

WordPress Apptivo Business Site CRM Plugin <= 3.0.12 is vulnerable to Cross Site Scripting (XSS)

LOW 22

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Apptivo Apptivo Business Site CRM plugin <= 3.0.12 versions.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00392 Published 2023-04-23 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Apptivo Business Site CRM plugin <= 5.3 - Arbitrary Content Deletion vulnerability

Apptivo Business Site CRM <= 5.3 - Cross-Site Request Forgery to IP Address Block

WordPress Apptivo Business Site CRM Plugin <= 3.0.12 is vulnerable to Cross Site Scripting (XSS)