WordPress Crew HRM plugin <= 1.1.1 - PHP Object Injection vulnerability

CVE-2024-43252

What is CVE-2024-43252?

A vulnerability in Crew HRM related to the deserialization of untrusted data has been identified, allowing for object injection. This issue can potentially lead to unauthorized access and manipulation of objects within the application. It affects versions from n/a through 1.1.1, making it crucial for users and administrators to take immediate action to secure their systems. Regular updates and security patches should be a priority to mitigate risks associated with this type of vulnerability.

References