CVE-2026-11421

The ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support plugin for WordPress is vulnerable to SQL Injection via the 'erpadvancefilter' parameter in all versions up to, and including, 1.17.4 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-11421

The ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support plugin for WordPress is vulnerable to SQL Injection via the 'erpadvancefilter' parameter in all versions up to, and including, 1.17.4 due to insufficient escaping on the user supplied parameter and lack of sufficient...

PT-2026-67942

Name of the Vulnerable Software and Affected Versions ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support versions prior to 1.17.5 Description An issue exists where authenticated attackers with the CRM Agent role, CRM Manager role, or WordPress administrator privileges, and the...

PT-2025-1770

Name of the Vulnerable Software and Affected Versions ELEX WordPress HelpDesk & Customer Ticketing System plugin versions up to, and including, 3.2.6 Description The issue is related to a missing capability check on the eh crm agent add user AJAX action, allowing authenticated attackers with...