WP ERP vulnerabilities
6 known vulnerabilities in WP ERP from weDevs. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.5 High severity
WP ERP: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP erp allows SQL Injection.This issue affects WP ERP: from n/a through <= 1.16.10.
- 7.5 High severity
WP ERP | Complete HR solution with recruitment…: Missing Authorization
The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before 1.13.4 is affected by an IDOR issue where employees can manipulate parameters to access the data of terminated employees.
- 8.8 High severity
ERP: Complete HR, Accounting & CRM Suite with…: Improper Neutralization of Special Elements used in an SQL Command
The WP ERP plugin for WordPress is vulnerable to SQL Injection via the ‘vendor_id’ and 'status' parameter in all versions up to, and including, 1.13.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existin
- 7.2 High severity
ERP: Complete HR, Accounting & CRM Suite with…: Improper Neutralization of Special Elements used in an SQL Command
The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in all versions up to, and including, 1.13.1 due to insufficient escaping on th
- 7.2 High severity
ERP: Complete HR, Accounting & CRM Suite with…: Improper Neutralization of Special Elements used in an SQL Command
The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in all versions up to, and including, 1.12.9 due to insufficient escaping on th
- 7.2 High severity
ERP: Complete HR, Accounting & CRM Suite with…: Improper Neutralization of Special Elements used in an SQL Command
The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is vulnerable to time-based SQL Injection via the erp/v1/accounting/v1/transactions/sales REST API endpoint in all versions up to, and includi