Advisories · Technology
nofearinc WP-CRM System – Manage Clients and Projects.
Every CVE that names nofearinc WP-CRM System – Manage Clients and Projects among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
WP-CRM System <= 3.4.6 - Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter
- nofearinc WP-CRM System – Manage Clients and Projects
- Information disclosure
- CVSS 5.4 Medium
WP-CRM System – Manage Clients and Projects <= 3.4.5 - Missing Authorization to Authenticated (Subscriber+) CRM Data Exposure and Task Modification
- nofearinc WP-CRM System – Manage Clients and Projects
- Broken access control