Unscored CVE-2019-9574 EUVD-2019-18945GHSA-r4vv-p8hp-54cv

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the A…

Published Mar 5, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role.

References

https://wordpress.org/plugins/hrm/#developers
[oss-security] 20190317 CVE-2019-9573 / CVE-2019-9574: WordPress plugin hrm missing server side authorization checks mailing-list
107464 vdb-entry