Ajitdas Devs CRM – Manage tasks, attendance and teams all together vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ajitdas Devs CRM – Manage tasks, attendance and teams all together: 2 record(s), with affected versions and fixes.
CVE-2025-13093
Medium · 5.3
CWE-862 Dec 13, 2025
Devs CRM – Manage tasks, attendance and teams all together <= 1.1.8 - Missing Authorization to Unauthenticated Lead Tag Update
The Devs CRM – Manage tasks, attendance and teams all together plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/devs-crm/v1/bulk-update' REST-API endpoint in all versions up to, and including, 1.1.8. This makes it possible for unauthenticated attackers to update leads tags.
CVE-2025-13092
Medium · 5.3
CWE-862 Dec 13, 2025
Devs CRM – Manage tasks, attendance and teams all together <= 1.1.8 - Unauthenticated Information Expsoure
The Devs CRM – Manage tasks, attendance and teams all together plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/devs-crm/v1/attendances REST API Endpoint in all versions up to, and including, 1.1.8. This makes it possible for unauthenticated attackers to retrieve private user data, including password hashes.