dripadmin
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CRM Memberships | 2 | – | Dec 5, 2025 |
Exploited and recent CVEs
- CVE-2025-13312 CRM Memberships <= 2.5 - Missing Authorization to Unauthenticated 'ntzcrm_add_new_tag' AJAX Action 0.3%
- CVE-2025-13313 CRM Memberships <= 2.6 - Missing Authorization to Privilege Escalation via Unauthenticated Password Reset in 'ntzcrm_changepassword' AJAX Endpoint 0.6%