Innovs HR – Complete Human Resource Management System for Your Business
Innovs HR – Complete Human Resource Management System for Your Business has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; none of them are fixed as of September 2026. Their average CVSS score is 5.2, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
None of the 2 issues recorded for Innovs HR – Complete Human Resource Management System for Your Business have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2023.
2 independent researchers contributed these findings, one record each. Innovs HR – Complete Human Resource Management System for Your Business is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2023-49171Innovs HR <= 1.0.3.4 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Innovs HR – Complete Human Resource Management System for Your Business
Author
Shawon C.
Manage your Employee/Staff/Human Resource from your very own WordPress dashboard. Simple and easy to use. Now you can manage leave, attendance from the same place! Fully functional, regular issue fixing, well coded. 👉 Features- 💁 HR Management 💁 Leave Management 💁 Attendance Management 💁 Work Anniversary 💁 Birthday Announcement HR Management -> Add Employee/HR (No Limit) -> Department & Designation based Leave Management -> Leave Entitlement -> Leave Policy -> Leave Request Attendnace Management -> Employee Self Check In & Check Out (new in version 1.0.3) -> Add Attendance Manually Work Anniversary (new in version 1.0.3) -> Auto announcement and wish the employees on their work anniversary Birthday Announcement (new in version 1.0.3) -> Announce the birthday of the Employees so that everyone can wish 👉 Docs Link: Documentation 👉 Feature Suggestion/Issue Track: GitHub
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C