Known vulnerabilities in Employee, Leave and Recruitment Management System – Crew HRM

Create career pages for job listings, hiring or recruiting great talent with Crew HRM. It helps manage employee info, leave requests, onboarding

3Reported vulnerabilities

8.1Highest CVSS score

1.2.3Latest version

100+Active installs

What to do now

Update Employee, Leave and Recruitment Management System – Crew HRM to 1.2.3 or later. 3 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 1, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-43252	High 8.1	0.4%	1.1.1 and earlier	`1.1.2`	August 12, 2024
CVE-2026-9237	Medium 4.3	0.4%	0 to 1.2.2 (inclusive)	`1.2.3`	July 9, 2026
CVE-2026-27351	Medium 4.3	0.2%	1.2.2 and earlier	`1.2.3`	June 2, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.