CVE-2026-27351

MEDIUM NVD

CVSS Score 5.4

Severity MEDIUM

Published Jun 02, 2026

Vendor unknown

Description

Missing Authorization vulnerability in Sekander Badsha Crew HRM allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Crew HRM: from n/a through 1.2.2.

References

https://patchstack.com/database/wordpress/plugin/hr-management/vulnerability/wordpress-crew-hrm-plugin-1-2-2-broken-access-control-vulnerability?_s_id=cve