WordPress plugin
HR Press Lite security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All HR Press Lite vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | Missing Authorization to Authenticated (Subscriber+) Sensitive Employee Information Exposure ≤1.0.2Update to 1.0.3 | CVE-2026-2720 |
- Medium6.5Missing Authorization to Authenticated (Subscriber+) Sensitive Employee Information Exposure
≤1.0.2Update to 1.0.3
HR Press Lite: common questions
Does HR Press Lite have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in HR Press Lite: 1 medium. None are known to affect version null.
How do I check which version of HR Press Lite I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent HR Press Lite vulnerability?
CVE-2026-2720, published Mar 20, 2026: Hr Press Lite <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Employee Information Exposure. Severity: Medium (CVSS 6.5).
Is any HR Press Lite vulnerability listed in CISA KEV?
No. None of the known HR Press Lite vulnerabilities is currently listed in the CISA KEV catalog.