CRM Memberships

CRM Memberships has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

Every one of the 3 issues recorded for CRM Memberships has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (2) reported by Athiwat Tiprasaharn (Jitlada). The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
6.5/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all CRM Memberships vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-13313

CRM Memberships <= 2.6 - Missing Authorization to Privilege Escalation via Unauthenticated Password Reset in 'ntzcrm_changepassword' AJAX Endpoint

Read the full analysis

Vulnerability Records

3 records
CRM Memberships banner
Latestv2.8

CRM Memberships

dripadmin

Author

dripadmin

5.0(1)
100/100
Last Updated
2026-06-22 (3mo ago)
Active Installs
0+
Downloads
3,654
Requires WP
6.0+
Requires PHP
7.2+
Tested up to
WP 6.9.7
Created
2021-01-27 (6y ago)

CRM Memberships plugin allows restricting your content to paid or registered members only. Use it for creating online courses, marketing funnel fulfillment etc. CRM Memberships plugin also allows easy integration of WordPress with CRMS such as Salesforce. Features Publications: Create courses and publications. Content Protection: Allows restricting your content to paid or registered members only. Access Tags: Tag based permissions. Add permission tags to any posts, pages, categories or user profiles! Publication Wizard: Create publications easily and associate access tags. Publication Gallery: Out of the box gallery page that lists all active publications. Compatibility Works with your existing contents. Measure User Engagement: Identify popular publications based on user actions. Subscriber Reports: List subscribers by Access Tags. Works with Salesforce CRM using our (Managed Package for Salesforce). Integration & Migration Help. Get it for importing data from other CRM and membership products. Priority Support. Get it Priority support plan will help you get the help from a dedicated team. CRM Integration We are going to add more CRM support in the future. You can request the one you want and we will add it for you on a priority basis! Easy to use Works out of the box with Minimal Settings Shortcodes Shortcode for CRM Memberships – Login page [ntzcrm_login] Shortcode for CRM Memberships – Publications page [ntzcrm_publications] Support We try our best to provide support on WordPress.org forums. However, We have a special team support where you can ask us questions and get help. Delivering a good user experience means a lot to us and so we try our best to reply each and every question that gets asked. Credits Select2 used https://github.com/select2/select2 – License URI: https://github.com/select2/select2/blob/develop/LICENSE.md, jquery-timepicker used https://github.com/jonthornton/jquery-timepicker

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C