Security Advisory
CVE-2019-9574
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role.