CVE-2024-1173

The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in all versions up to, and including, 1.13.1 due to insufficient escaping on the user supplied parameter and lack of...

WordPress WP ERP Plugin <= 1.13.1 is vulnerable to SQL Injection

Software WP ERP Type Plugin Vulnerable versions = 1.13.1 Fixed in 1.13.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-1173 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 09c926a13fcc Credits Edwin Siebel edwinsiebel Required privilege Shop Manager...