https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:50:31.573552+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-13092 CVE-2025-13092 — Devs CRM – Manage tasks, attendance and teams all together <= 1.1.8 - Unauthenticated Information Expsoure 2026-10-10T14:50:31.592475+00:00

Affected: ajitdas Devs CRM – Manage tasks, attendance and teams all together

The Devs CRM – Manage tasks, attendance and teams all together plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/devs-crm/v1/attendances REST API Endpoint in all versions up to, and including, 1.1.8. This makes it possible for unauthenticated attackers to retrieve private user data, including password hashes.