CVE-2026-2720

The Hr Press Lite WordPress plugin is vulnerable due to a missing capability check on the hrp-fetch-employees AJAX action in all versions up to 1.0.2, allowing authenticated users with Subscriber-level access and above to fetch sensitive employee data (names, emails, phone numbers, salary/pay rat...

PT-2024-25786

Name of the Vulnerable Software and Affected Versions CmsEasy version 7.7.7.9 Description A local file inclusion issue was discovered, allowing attackers to read arbitrary files via the file get contents function in the fetch action method of "/admin/template admin.php". Recommendations For CmsEa...