CyberSecBulletin

Asaquzzaman vulnerabilities

We track 2 vulnerabilities in Asaquzzaman products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 4, 2025.

2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score

Latest Asaquzzaman vulnerabilities

  • 8.1 High severity

    WP Human Resource Management: Missing Authorization

    CVE-2025-5956Asaquzzaman

    The WP Human Resource Management plugin for WordPress is vulnerable to Arbitrary User Deletion due to a missing authorization within the ajax_delete_employee() function in versions 2.0.0 through 2.2.17. The plugin’s deletion handler reads the client-supplied $

  • 8.8 High severity

    WP Human Resource Management: Missing Authorization

    CVE-2025-5953Asaquzzaman

    The WP Human Resource Management plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the ajax_insert_employee() and update_empoyee() functions in versions 2.0.0 through 2.2.17. The AJAX handler reads the client-supplied $