CVE-2019-9574: Mishubd Wp Human Resource Management

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role.

Affected products

• Mishubd Wp Human Resource Management: before 2.2.6 (fixed in 2.2.6)

Published 2019-03-05. Last modified 2026-06-17.