Devs CRM
Devs CRM has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 2 of the records (100%).
None of the 2 issues recorded for Devs CRM have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Athiwat Tiprasaharn (Jitlada). The current release is tested up to WordPress 6.8.8.
CVE-2025-13092Devs CRM – Manage tasks, attendance and teams all together <= 1.1.8 - Unauthenticated Information Expsoure
Read the full analysisVulnerability Records

Devs CRM
Author
Devsbrain
Take control of your customer relationships without leaving WordPress. Devs CRM is a privacy-focused, WordPress-native CRM plugin designed for freelancers, small businesses, and agencies who want to manage their contacts and sales pipeline without relying on expensive SaaS platforms. Your data stays yours. No external connections, no data harvesting, no monthly fees. Everything runs on your WordPress server. Why Choose Devs CRM? 100% Privacy-First — Your customer data never leaves your WordPress site Truly Free — No “lite” version, no hidden paywalls, every feature included Lightweight — Built for performance, not bloat WordPress-Native — Feels like part of WordPress, not a bolted-on app Integrates With Your Stack — Works with WooCommerce, Gravity Forms, and Contact Form 7 Who Is This For? Freelancers who need to track client projects and follow-ups Small businesses managing customer relationships on a budget Agencies handling multiple leads and proposals E-commerce stores wanting better customer insights from WooCommerce Anyone who values privacy and data ownership Core Features Contact Management Add, edit, and organize unlimited contacts Tag contacts for easy filtering and segmentation Import and export contacts via CSV Quick search to find anyone instantly Bulk actions for efficient contact management Visual Sales Pipeline Drag-and-drop Kanban board for your leads Track every deal from first contact to close Customize stages to match your sales process Default stages: New → Contacted → Qualified → Proposal → Won/Lost Add activity notes and timeline to any contact Email Campaigns Create beautiful email campaigns in minutes Send bulk emails to targeted contact groups Filter recipients by tags for precise targeting Schedule campaigns for optimal timing Reusable email templates save you time Automated follow-up sequences for nurturing leads Smart Integrations WooCommerce — Automatically capture customers as contacts when orders complete. See purchase history alongside contact details. Gravity Forms — Every form submission instantly becomes a contact. Perfect for lead capture forms and inquiries. Contact Form 7 — Same seamless integration for CF7 users. No configuration needed — just activate and go. Frontend Lead Capture Embed lead capture forms anywhere using the [dcrm_lead_form] shortcode Customize the form appearance with your theme Leads automatically enter your pipeline Built for WordPress Follows WordPress coding standards Compatible with popular page builders Translation-ready (i18n support) Works with multisite installations Regular updates and active development Shortcodes Lead Capture Form [dcrm_lead_form] Use this shortcode to embed a lead capture form on any page or post. Works with all standard themes and page builders. System Requirements WordPress 5.8 or higher PHP 7.4 or higher MySQL 5.7+ or MariaDB 10.3+ Support For support, feature requests, or bug reports, please visit our GitHub repository or WordPress.org support forum. Translations Devs CRM is translation-ready. If you’d like to contribute a translation, please contact us. Contributing Devs CRM is open source. Contributions are welcome via pull requests on GitHub.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C