High · 7.5 CVE-2025-31909 EUVD-2025-14722GHSA-q9p4-73jm-wjh3

WordPress Apptivo Business Site CRM plugin <= 5.3 - Arbitrary Content Deletion vulnerability

Published Apr 3, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Apptivo Product: Apptivo Business Site CRM

Description

Missing Authorization vulnerability in Apptivo Apptivo Business Site CRM apptivo-business-site allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Apptivo Business Site CRM: from n/a through <= 5.3.

Affected products

Vendor	Product	Affected	Fixed
Apptivo	Apptivo Business Site CRM	≤ 5.3	—

References

https://patchstack.com/database/Wordpress/Plugin/apptivo-business-site/vulnerability/wordpress-apptivo-business-site-crm-plugin-5-3-arbitrary-content-deletion-vulnerability?_s_id=cve vdb-entry