fassionstorage vulnerabilities

Products

• Propovoice: All-in-One Client Management System 2

Latest fassionstorage CVEs

Newest publication first

1. CVE-2026-15312 Propovoice: All-in-One Client Management System <= 1.7.8 - Authenticated (ndpv_manager+) Privilege Escalation via 'role' Parameter

   Published 2026-08-15

   High·CVSS 8.8 EPSS 0.52%

   The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8. This is due to the create() function's REST endpoint failing to validate the user-supplied role parameter against an allowli...

2. CVE-2025-8422 Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read

   Published 2025-09-11

   High·CVSS 7.5 EPSS 0.65%

   The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.7.6.7 via the send_email() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.