WordPress plugin
Devs CRM security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All Devs CRM vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Information Expsoure ≤1.1.8Update to 1.1.9 | CVE-2025-13092 | |
| Medium5.3 | Missing Authorization to Unauthenticated Lead Tag Update ≤1.1.8Update to 1.1.9 | CVE-2025-13093 |
- Medium5.3Unauthenticated Information Expsoure
≤1.1.8Update to 1.1.9
- Medium5.3Missing Authorization to Unauthenticated Lead Tag Update
≤1.1.8Update to 1.1.9
Devs CRM: common questions
Does Devs CRM have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Devs CRM: 2 medium. None are known to affect version null.
How do I check which version of Devs CRM I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Devs CRM vulnerability?
CVE-2025-13092, published Dec 12, 2025: Devs CRM – Manage tasks, attendance and teams all together <= 1.1.8 - Unauthenticated Information Expsoure. Severity: Medium (CVSS 5.3).
Is any Devs CRM vulnerability listed in CISA KEV?
No. None of the known Devs CRM vulnerabilities is currently listed in the CISA KEV catalog.