Propovoice: All-in-One Client Management System vulnerabilities

2 known vulnerabilities in Propovoice: All-in-One Client Management System from Fassionstorage. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Propovoice: All-in-One Client Management System: Improper Privilege Management

  CVE-2026-15312Aug 15, 2026Fassionstorage

  The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8. This is due to the `create()` function's REST endpoint failing to validate the user-supplied `role` para

• 7.5 High severity

  Propovoice: All-in-One Client Management System: External Control of File Name or Path

  CVE-2025-8422Sep 11, 2025Fassionstorage

  The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.7.6.7 via the send_email() function. This makes it possible for unauthenticated attackers to read the contents