Rentsyst Vulnerabilities

The RentSyst – CRM solution for fleet management plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 2.0.100 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages th...

CVSS:

6.1

Affected:

up to 2.0.100

Fixed in:

2.0.101

Disclosed:

Aug 7, 2025

CVE-2025-48152 on NVD →

The RentSyst – CRM solution for fleet management plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.92. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious...

CVSS:

6.1

Affected:

up to 2.0.92

Fixed in:

2.0.93

Disclosed:

Apr 9, 2025

CVE-2025-32501 on NVD →