A vulnerability categorized as problematic has been discovered in Sekander Badsha Crew HRM Plugin up to 1.2.2 on WordPress. This vulnerability affects unknown code. Executing a manipulation can lead to missing authorization. This vulnerability is tracked as CVE-2026-27351 . The attack can be launched remotely. No exploit exists.