Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Mario Peshev Clear all filters
TI-2025-38428 CVE-2025-62106 · GHSA-6vh7-qp6r-h896

WordPress WP-CRM System plugin <= 3.4.5 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through <= 3.4.5.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00262 Published 2026-01-22 No fix listed CWE-862
TI-2025-38929 CVE-2025-62740 · GHSA-pqjv-crw5-4v8p

WordPress WP-CRM System plugin <= 3.4.6 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through <= 3.4.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00254 Published 2025-12-09 No fix listed CWE-862
TI-2025-31318 CVE-2025-49270 · GHSA-2cw4-3jwf-xx2h

WordPress WP-CRM System plugin <= 3.4.2 - Broken Access Control Vulnerability

Priority LOW 30

Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP-CRM System: from n/a through <= 3.4.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00334 Published 2025-06-06 No fix listed CWE-862
TI-2023-24726 CVE-2023-46073 · GHSA-cxw5-mxg9-j5x2

WordPress DX Delete Attached Media plugin <= 2.0.5.1 - Broken Access Control vulnerability + CSRF

Priority LOW 30

Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: f…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00427 Published 2025-01-02 No fix listed CWE-862