HR Press Lite
HR Press Lite has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for HR Press Lite has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.
All of these findings were reported by Itthidej Aramsri (Boeing777). HR Press Lite is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2026-2720Hr Press Lite <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Employee Information Exposure
Read the full analysisVulnerability Records

HR Press Lite
Author
CODECLOVE
HR Press Lite is a lightweight, modern HR Management plugin built for WordPress. It gives small and medium businesses a simple, clean way to manage employees, track daily attendance, log breaks, handle departments and designations, and send announcements — without leaving WordPress. No complicated setup. No monthly SaaS fees. Just install and start managing your team. ⚡ Free Features Employee Check-in / Check-out — Track daily working hours automatically Break Logs — Record and review employee break times Departments & Designations — Organise your company structure Attendance Management — View and manage attendance records Announcements — Broadcast messages to all employees instantly Email Notifications — Send emails directly to employees 🔒 Built With Security in Mind HR Press Lite is developed following WordPress security best practices — all AJAX endpoints are protected with nonces and capability checks, so your employee data stays safe. 👉 Upgrade to HR Press PRO Take your HR operations to the next level with HR Press PRO: ✅ Leave Management — Employees submit leave requests; managers approve or reject ✅ Holiday Email Notifications — Auto-notify staff of upcoming holidays ✅ IP Restriction — Restrict check-ins to your office network only ✅ IP Whitelisting — Approve trusted IPs for remote work flexibility ✅ Priority Support — Get direct help from the development team ✅ Early Access to New Features — Shape the product roadmap 👉 View PRO Plans →
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C