CVE-2023-2744

Exploit Title: WP Plugins WP ERP = 1.12.2 - SQL Injection Date: 15-10-2023 Exploit Author: Arvandy Software Link: https://wordpress.org/plugins/erp/ Vendor Homepage: https://wperp.com/ Version: 1.12.2 Tested on: Windows, Linux CVE: CVE-2023-2744 Product Description WP ERP is the first full-fledge...

CVE-2026-96343

Custom role PHP Object Injection in WP ERP = 1.17.9 versions...

CVE-2026-96346

Author SQL Injection in WP ERP = 1.17.9 versions...

CVE-2026-96346

The WP ERP plugin for WordPress is vulnerable to SQL Injection in versions

CVE-2026-96346 WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability

Author SQL Injection in WP ERP = 1.17.9 versions...

CVE-2026-96346 WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability

Author SQL Injection in WP ERP = 1.17.9 versions...

EUVD-2026-89859

Author SQL Injection in WP ERP = 1.17.9 versions...

EUVD-2026-89856

Custom role PHP Object Injection in WP ERP = 1.17.9 versions...

CVE-2026-96343 WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability

Custom role PHP Object Injection in WP ERP = 1.17.9 versions...

CVE-2026-96343 WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability

Custom role PHP Object Injection in WP ERP = 1.17.9 versions...

CVE-2026-96343

The WP ERP plugin for WordPress, in versions

PT-2026-103188

Custom role PHP Object Injection in WP ERP = 1.17.9 versions...

PT-2026-103191

Author SQL Injection in WP ERP = 1.17.9 versions...

CVE-2026-96346: Improper Neutralization of Special Elements used in an SQL Command

Author SQL Injection in WP ERP = 1.17.9 versions...

CVE-2026-96343: Deserialization of Untrusted Data

Custom role PHP Object Injection in WP ERP = 1.17.9 versions...

WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP ERP versions = 1.17.9...

WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP ERP versions = 1.17.9...

WordPress ERP plugin <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment vulnerability

Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment vulnerability discovered by Talal Nasraddeen in WordPress Plugin WP ERP versions = 1.17.8...

CVE-2026-59522: Missing Authorization

Subscriber Broken Access Control in WP ERP = 1.17.5 versions...

WordPress WP ERP Pro plugin <= 1.5.1 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by kudasav in WordPress Plugin WP ERP Pro versions = 1.5.1...