CVE-2024-0608

🗓️ 04 Feb 2025 23:04:48Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 4 Views

WP ERP plugin vulnerable to SQL Injection via 'email' parameter, allowing data extraction by authenticated attackers.

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress Plugin WP ERP 安全漏洞	29 Mar 202400:00	–	cnnvd
CVE	CVE-2024-0608	29 Mar 202406:44	–	cve
Cvelist	CVE-2024-0608 WP ERP \| Complete HR solution with recruitment & job listings \| WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL Injection	29 Mar 202406:44	–	cvelist
EUVD	EUVD-2024-16401	3 Oct 202520:07	–	euvd
NVD	CVE-2024-0608	29 Mar 202407:15	–	nvd
Patchstack	WordPress WP ERP plugin <= 1.13.1 - SQL Injection vulnerability	29 Mar 202409:01	–	patchstack
Patchstack	WordPress WP ERP Plugin <= 1.12.9 is vulnerable to SQL Injection	29 Mar 202400:00	–	patchstack
Positive Technologies	PT-2024-15685 · WordPress · Wp Erp	28 Mar 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-0608 WP ERP \| Complete HR solution with recruitment & job listings \| WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL Injection	29 Mar 202406:44	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (March 25, 2024 to March 31, 2024)	4 Apr 202417:35	–	wordfence

Source	Link
cve	www.cve.org/CVERecord

08 Apr 2026 19:43Current

7.2High risk

Vulners AI Score7.2

CVSS 3.16.5

EPSS0.00746

SSVC

sql injection vulnerability wp erp plugin authenticated attacker access