What’s Vulnerable › Vulnerabilities

CVE-2025-63294

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-11-04 · updated 2026-06-17
• Weakness: CWE-862

Description

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on behalf of other users.

Affected products

• WorkDo Hrm Saas: 8.1

References

• https://codecanyon.net/item/hrm-saas-hr-and-payroll-tool/25982934
• https://medium.com/@barrattjack89/cve-2025-63294-insecure-permissions-in-workdo-hrm-saas-hr-and-payroll-8-1-d6bb03c21177
• https://workdo.io/hrm-saas-human-resource-management-software/

Get alerted when CVE-2025-63294 or the next vulnerability affects your stack