dripadmin CRM Memberships

• CVE-2025-13312 Medium 5.3 CRM Memberships <= 2.5 - Missing Authorization to Unauthenticated 'ntzcrm_add_new_tag' AJAX Action 0.3%
• CVE-2025-13313 Critical 9.8 CRM Memberships <= 2.6 - Missing Authorization to Privilege Escalation via Unauthenticated Password Reset in 'ntzcrm_changepassword' AJAX Endpoint 0.6%