Skip to content
OpenAdvisories

Vendor

fassionstorage

2 known vulnerabilities.

Products

Propovoice: All-in-One Client Management System 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-15312

    Propovoice: All-in-One Client Management System <= 1.7.8 - Authenticated (ndpv_manager+) Privilege Escalation via 'role' Parameter

    The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8. This is due to the `create()` function's REST endpoint failing to validate the user-supplied `role` par…

    fassionstorage Propovoice: All-in-One Client Management System Web / CMS
  • High 7.5
    CVE-2025-8422 Public exploit

    Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read

    The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.7.6.7 via the send_email() function. This makes it possible for unauthenticated attackers to read the content…

    fassionstorage Propovoice: All-in-One Client Management System Web / CMS