CRM Memberships vulnerabilities

1 known vulnerability in CRM Memberships from Dripadmin. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  CRM Memberships: Missing Authorization

  CVE-2025-13313Dec 5, 2025Dripadmin

  The CRM Memberships plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 2.6. This is due to missing authorization and authentication checks on the `ntzcrm_changepassword` AJAX action. This makes i