PT-2025-53903 · Weblizar · Hr Management Lite

Benzdeus · CVE-2025-69022 · Published 2025-12-30 · Updated 2025-12-30

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions HR Management Lite versions prior to 3.6

Description An incorrect access control configuration exists in Weblizar HR Management Lite, potentially allowing unauthorized access. The issue involves a missing authorization check.

Recommendations Update HR Management Lite to version 3.6 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-69022

Affected Products

Hr Management Lite

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-69022 · Security Note
• https://twitter.com/CVEnew/status/2005961161628336566 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/hr-management-lite/vulnerability/wordpress-hr-management-lite-plugin-3-5-broken-access-control-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/hr-management-lite/vulnerability/wordpress-hr-management-lite-plugin-3-5-broken-access-control-vulnerability?_s_id=cve · Note