WP Human Resource Management vulnerabilities

2 known vulnerabilities in WP Human Resource Management from Asaquzzaman. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  WP Human Resource Management: Missing Authorization

  CVE-2025-5956Jul 4, 2025Asaquzzaman

  The WP Human Resource Management plugin for WordPress is vulnerable to Arbitrary User Deletion due to a missing authorization within the ajax_delete_employee() function in versions 2.0.0 through 2.2.17. The plugin’s deletion handler reads the client-supplied $

• 8.8 High severity

  WP Human Resource Management: Missing Authorization

  CVE-2025-5953Jul 4, 2025Asaquzzaman

  The WP Human Resource Management plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the ajax_insert_employee() and update_empoyee() functions in versions 2.0.0 through 2.2.17. The AJAX handler reads the client-supplied $