What’s Vulnerable › Products
weDevs WP ERP vulnerabilities
24 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.
Check whether your weDevs WP ERP version is affected
Latest weDevs WP ERP vulnerabilities
- CVE-2026-25448 — WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2026-96346 — WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability (CVSS 7.6)
- CVE-2026-96343 — WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability (CVSS 7.2)
- CVE-2026-59522 — WordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2026-31917 — WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerability (CVSS 8.5)
- CVE-2025-67546 — WordPress WP ERP plugin <= 1.16.6 - Sensitive Data Exposure vulnerability (CVSS 6.5)
- CVE-2025-63008 — WordPress WP ERP plugin <= 1.16.7 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2024-12812 — WP ERP < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information (CVSS 7.5)
- CVE-2024-12808 — WP ERP | Complete HR solution with recruitment < 1.13.4 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2025-30896 — WordPress WP ERP plugin <= 1.13.4 - Broken Access Control vulnerability (CVSS 5.4)
- CVE-2023-45765 — WordPress WP ERP plugin <= 1.12.6 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2024-47640 — WordPress WP ERP plugin <= 1.13.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2024-6666 — WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id (CVSS 8.8)
- CVE-2024-1173 — WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (AccountingManager+) SQL Injection (CVSS 7.2)
- CVE-2024-0952 — WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id (CVSS 7.2)
- CVE-2024-0956 — WP ERP <= 1.13.0 - Authenticated (AccountingManager+) SQL Injection (CVSS 4.9)
- CVE-2024-0913 — WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection (CVSS 7.2)
- CVE-2024-0609 — WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
- CVE-2024-0608 — WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL Injection (CVSS 6.5)
- CVE-2024-21747 — WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection (CVSS 4.9)
- CVE-2023-34008 — WordPress WP ERP Plugin <= 1.12.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
- CVE-2020-36735 — WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.6.3 - Cross-Site Request Forgery Bypass (CVSS 4.3)
- CVE-2023-2744 — WP ERP < 1.12.4 - Admin+ SQL Injection (CVSS 7.2)
- CVE-2023-2743 — WP ERP < 1.12.4 - Reflected Cross-Site Scripting (CVSS 6.1)