HR Press Lite

HR Press Lite has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for HR Press Lite has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Itthidej Aramsri (Boeing777). HR Press Lite is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
6.5/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all HR Press Lite vulnerabilities before they are exploited.

Most severe open issueCVSS 6.5CVE-2026-2720

Hr Press Lite <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Employee Information Exposure

Read the full analysis

Vulnerability Records

1 records
HR Press Lite banner
Latestv1.0.4

HR Press Lite

CODECLOVE

Author

CODECLOVE

0.0(0)
0/100
Last Updated
2026-05-23 (4mo ago)
Active Installs
70+
Downloads
3,028
Requires WP
6.0+
Requires PHP
7.4+
Tested up to
WP 6.9.7
Created
2022-12-19 (4y ago)

HR Press Lite is a lightweight, modern HR Management plugin built for WordPress. It gives small and medium businesses a simple, clean way to manage employees, track daily attendance, log breaks, handle departments and designations, and send announcements — without leaving WordPress. No complicated setup. No monthly SaaS fees. Just install and start managing your team. ⚡ Free Features Employee Check-in / Check-out — Track daily working hours automatically Break Logs — Record and review employee break times Departments & Designations — Organise your company structure Attendance Management — View and manage attendance records Announcements — Broadcast messages to all employees instantly Email Notifications — Send emails directly to employees 🔒 Built With Security in Mind HR Press Lite is developed following WordPress security best practices — all AJAX endpoints are protected with nonces and capability checks, so your employee data stays safe. 👉 Upgrade to HR Press PRO Take your HR operations to the next level with HR Press PRO: ✅ Leave Management — Employees submit leave requests; managers approve or reject ✅ Holiday Email Notifications — Auto-notify staff of upcoming holidays ✅ IP Restriction — Restrict check-ins to your office network only ✅ IP Whitelisting — Approve trusted IPs for remote work flexibility ✅ Priority Support — Get direct help from the development team ✅ Early Access to New Features — Shape the product roadmap 👉 View PRO Plans →

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C