Skip to content
OpenAdvisories

Vendor

crewhrm

1 known vulnerabilities.

Products

Employee, Leave and Recruitment Management System – Crew HRM 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-9237

    Employee, Leave and Recruitment Management System <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Job Deletion via crewhrm_singleJobAction AJAX Action

    The Employee, Leave and Recruitment Management System – Crew HRM plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.2. This is due to the plugin not properly verifying that a user is authorized to perform an a…

    crewhrm Employee, Leave and Recruitment Management System – Crew HRM Web / CMS