CVE-2026-9004: Sensitive information exposure in the WP-CRM System plugin

The WP-CRM System – Manage Clients and Projects WordPress plugin is vulnerable to sensitive information exposure in all versions up to and including 3.4.6.