Skip to content
OpenAdvisories

Vendor

ArnasDon

4 known vulnerabilities.

Products

wacrm 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2026-67530

    WACRM: SSRF via the automation `send_webhook` action

    WACRM is a self-hostable CRM template for WhatsApp. In 0.7.0 and earlier, the automation send_webhook action in src/lib/automations/engine.ts and its validation in src/lib/automations/validate.ts allowed an authenticated user with automation privileges to sub…

    ArnasDon wacrm