Dripadmin Crm Memberships
2 CVEs affecting Dripadmin Crm Memberships. Latest disclosed: 2025-12-05. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-13313 | Critical | 9.8 | 2025-12-05 | The CRM Memberships plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 2.6. This is due to mis… |
CVE-2025-13312 | Medium | 5.3 | 2025-12-05 | The CRM Memberships plugin for WordPress is vulnerable to unauthorized membership tag creation due to a missing capability check on the 'ntzcrm_add_new_tag' fu… |