WordPress CRM Plugin – WP-CRM System, CVE-2025-49270

CVE, Research URL: CVE-2025-49270
Home page URL: Security reports for WordPress CRM Plugin – WP-CRM System
Application: WordPress CRM Plugin – WP-CRM System
Published on: Jun 06, 2025
Research Description: Missing Authorization vulnerability in Mario Peshev WP-CRM System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WP-CRM System: from n/a through 3.4.2.
Affected versions: max 3.4.3.
Status: vulnerable

WordPress CRM Plugin &#8211; WP-CRM System, CVE-2025-49270