ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support vulnerabilities

Product

ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support

by wedevs · last CVE Jul 11, 2024

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 4Medium 4Low 0

Severity

Exploitation

Watch

Add ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-6666	8.8	1%	Jul 11	WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id Affected: through 1.13.0
CVE-2024-1173	7.2	1%	May 2	WP ERP \| Complete HR solution with recruitment & job listings \| WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (AccountingManager+) SQL Injection Affected: through 1.13.1
CVE-2024-0952	7.2	1%	Apr 9	WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id Affected: through 1.12.9
CVE-2024-0913	7.2	1%	Mar 29	WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection Affected: through 1.13.0
CVE-2024-0608	6.5	1%	Mar 29	WP ERP \| Complete HR solution with recruitment & job listings \| WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL Injection Affected: through 1.13.1
CVE-2024-0609	6.1	1%	Mar 29	WP ERP \| Complete HR solution with recruitment & job listings \| WooCommerce CRM & Accounting <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting Affected: through 1.13.1
CVE-2024-0956	4.9	1%	Mar 29	WP ERP <= 1.13.0 - Authenticated (AccountingManager+) SQL Injection Affected: through 1.13.0
CVE-2020-36735	4.3	0%	Jul 1	WP ERP \| Complete HR solution with recruitment & job listings \| WooCommerce CRM & Accounting <= 1.6.3 - Cross-Site Request Forgery Bypass Affected: before 1.6.4