cleantalk
Vulnerabilities and Security Researches

CRM ERP Business Solution | freelancers & SME | for WordPress & WooCommerce, CVE-2025-49987

CVE, Research URL

CVE-2025-49987

Home page URL

Security reports for CRM ERP Business Solution | freelancers & SME | for WordPress & WooCommerce

Application

CRM ERP Business Solution | freelancers & SME | for WordPress & WooCommerce

Published on
Jun 20, 2025
Research Description
Missing Authorization vulnerability in WPFactory CRM ERP Business Solution allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CRM ERP Business Solution: from n/a through 1.13.
Affected versions
Min -, max 1.13.
Status
vulnerable
Previous vulnerability researches
VR Calendar (CVE-2024-44013) , Sep 28, 2024
VR Calendar (CVE-2025-5936) , Jun 29, 2025
VR Calendar (CVE-2022-2314) , Jun 07, 2024
VR Calendar (CVE-2022-3852) , Jun 07, 2024
New vulnerability
Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes (CVE-2025-49973) , Jun 30, 2025
Post Carousel Slider for Elementor (CVE-2025-3863) , Jun 30, 2025
WP User Stylesheet Switcher (CVE-2025-52792) , Jun 30, 2025
Easy FancyBox – WordPress Lightbox Plugin (CVE-2025-52707) , Jun 30, 2025
CRM ERP Business Solution | freelancers & SME | for WordPress & WooCommerce (CVE-2025-49987) , Jun 30, 2025