nofearinc WP-CRM System – Manage Clients and Projects

• CVE-2026-9004 Medium 4.3 WP-CRM System <= 3.4.6 - Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter 0.4%
• CVE-2025-14854 Medium 5.4 WP-CRM System – Manage Clients and Projects <= 3.4.5 - Missing Authorization to Authenticated (Subscriber+) CRM Data Exposure and Task Modification 0.2%