CVE-2023-2744

Título del Exploit: WP Plugins WP ERP = 1.12.2 - Inyección SQL Fecha: 15-10-2023 Autor del Exploit: Arvandy Enlace del software: https://wordpress.org/plugins/erp/ Página del proveedor: https://wperp.com/ Versión: 1.12.2 Probado en: Windows, Linux CVE: CVE-2023-2744 Descripción del producto WP ER...

CVE-2026-96346

Author SQL Injection in WP ERP = 1.17.9 versions...

CVE-2026-96343

Custom role PHP Object Injection in WP ERP = 1.17.9 versions...

CVE-2026-96346 WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability

Author SQL Injection in WP ERP = 1.17.9 versions...

CVE-2026-96346 WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability

Author SQL Injection in WP ERP = 1.17.9 versions...

CVE-2026-96346

The WP ERP plugin for WordPress is vulnerable to SQL Injection in versions

EUVD-2026-89859

Author SQL Injection in WP ERP = 1.17.9 versions...

CVE-2026-96343 WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability

Custom role PHP Object Injection in WP ERP = 1.17.9 versions...

EUVD-2026-89856

Custom role PHP Object Injection in WP ERP = 1.17.9 versions...

CVE-2026-96343 WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability

Custom role PHP Object Injection in WP ERP = 1.17.9 versions...

CVE-2026-96343

The WP ERP plugin for WordPress, in versions

WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP ERP versions = 1.17.9...

WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP ERP versions = 1.17.9...

WordPress ERP plugin <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment vulnerability

Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment vulnerability discovered by Talal Nasraddeen in WordPress Plugin WP ERP versions = 1.17.8...

CVE-2026-59522: Missing Authorization

Subscriber Broken Access Control in WP ERP = 1.17.5 versions...

WordPress WP ERP Pro plugin <= 1.5.1 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by kudasav in WordPress Plugin WP ERP Pro versions = 1.5.1...

CVE-2026-4834

The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'searchkey' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

CVE-2026-4834

The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'searchkey' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

WordPress plugin WP ERP Pro SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

CVE-2026-4834: Improper Neutralization of Special Elements used in an SQL Command

The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'searchkey' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...