160 matches found
CVE-2023-2744
Exploit Title: WP Plugins WP ERP = 1.12.2 - SQL Injection Date: 15-10-2023 Exploit Author: Arvandy Software Link: https://wordpress.org/plugins/erp/ Vendor Homepage: https://wperp.com/ Version: 1.12.2 Tested on: Windows, Linux CVE: CVE-2023-2744 Product Description WP ERP is the first full-fledge...
CVE-2026-105191
The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin versions before 1.17.11 is vulnerable to a sensitive data disclosure. The root cause is a missing capability check on an AJAX action that returns the stored before-and-after values of a record change. This flaw al...
WordPress ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin < 1.17.11 - Subscriber+ Sensitive Data Disclosure vulnerability
Subscriber+ Sensitive Data Disclosure vulnerability discovered by cyberkareem in WordPress Plugin WP ERP versions 1.17.11...
CVE-2026-105191 WP ERP < 1.17.11 - Subscriber+ Sensitive Data Disclosure via Audit Log
The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin before 1.17.11 does not perform a capability check on an AJAX action that returns the stored before-and-after values of a record change, allowing any authenticated user, including Subscribers, to read other users'...
WordPress ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin <= 1.17.10 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by rpgsec in WordPress Plugin WP ERP versions = 1.17.10...
CVE-2026-25448
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through 1.17.10...
CVE-2026-25448
The WP ERP plugin for WordPress, developed by weDevs, contains a Broken Access Control (Missing Authorization) vulnerability in versions up to and including 1.17.10 . This issue arises from incorrectly configured access control security levels , which could allow unauthorized exploitation. The do...
EUVD-2026-112889
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through 1.17.10...
CVE-2026-25448 WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through 1.17.10...
CVE-2026-25448 WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through 1.17.10...
WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin WP ERP versions = 1.17.10...
CVE-2026-25448: weDevs WP ERP: Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control…
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through 1.17.10...
PT-2026-132192
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through 1.17.10...
CVE-2026-96346
Author SQL Injection in WP ERP = 1.17.9 versions...
CVE-2026-96343
Custom role PHP Object Injection in WP ERP = 1.17.9 versions...
CVE-2026-96346 WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability
Author SQL Injection in WP ERP = 1.17.9 versions...
CVE-2026-96346 WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability
Author SQL Injection in WP ERP = 1.17.9 versions...
CVE-2026-96346
The WP ERP plugin for WordPress is vulnerable to SQL Injection in versions