ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce vulnerabilities

2 known vulnerabilities in ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce from weDevs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  ERP: Complete HR, Accounting & CRM Suite Built…: Improper Neutralization of Input During Web Page Generation

  CVE-2026-96894Oct 30, 2026weDevs

  The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Inbound Email Body in all versions up to, and including, 1.17.10 due to insufficient input sanitization and output escaping

• 9.8 Critical severity

  ERP: Complete HR, Accounting & CRM Suite Built…: Unrestricted Upload of File with Dangerous Type

  CVE-2026-18080Aug 26, 2026weDevs

  The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 1.17.8 via the save_attachments() function. This is due to missing file extension valid