Skip to content
OpenAdvisories

Vendor

Mario Peshev

6 known vulnerabilities.

Products

WP-CRM System 5 DX Delete Attached Media 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-62106

    WordPress WP-CRM System plugin <= 3.4.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through <= 3.4.5.

    Mario Peshev WP-CRM System
  • Medium 5.3
    CVE-2025-62740

    WordPress WP-CRM System plugin <= 3.4.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through <= 3.4.6.

    Mario Peshev WP-CRM System
  • Medium 5.3
    CVE-2025-49270

    WordPress WP-CRM System plugin <= 3.4.2 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP-CRM System: from n/a through <= 3.4.2.

    Mario Peshev WP-CRM System
  • Medium 5.3
    CVE-2023-46073

    WordPress DX Delete Attached Media plugin <= 2.0.5.1 - Broken Access Control vulnerability + CSRF

    Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through <= 2.0.5.1.

    Mario Peshev DX Delete Attached Media
  • Medium 6.5
    CVE-2024-55991

    WordPress CRM Plugin – WP-CRM System plugin <= 3.2.9.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through <= 3.2.9.1.

    Mario Peshev WP-CRM System