CVE-2019-9574

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-03-05

Last modified

2024-08-04

Weaknesses

CWE-862

Affected products

• Wp Human Resource Management (Mishubd)

References

• http://www.openwall.com/lists/oss-security/2019/03/17/1
• http://www.securityfocus.com/bid/107464
• https://wordpress.org/plugins/hrm/#developers