WE
Product
WP ERP
24
CVEs
0
On KEV
8.8
Max CVSS
3
New 30D
Severity mix
Critical 0High 9Medium 15Low 0
Watch
Add WP ERP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-6666 | 8.8 | Jul 11 | WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id Affected: before 1.13.1 |
| CVE-2026-31917 | 8.5 | Mar 13 | WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerability Affected: through 1.16.10 |
| CVE-2026-96346 | 7.6 | Sep 30 | WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability Affected: through 1.17.9 |
| CVE-2024-12812 | 7.5 | May 15 | WP ERP < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information Affected: before 1.13.4 |
| CVE-2026-96343 | 7.2 | Sep 30 | WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability Affected: through 1.17.9 |
| CVE-2024-1173 | 7.2 | May 2 | WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (AccountingManager+) SQL Injection Affected: before 1.13.2 |
| CVE-2024-0952 | 7.2 | Apr 9 | WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id Affected: before 1.13.0 |
| CVE-2024-0913 | 7.2 | Mar 29 | WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection Affected: through 1.12.9 |
| CVE-2023-2744 | 7.2 | Jun 27 | WP ERP < 1.12.4 - Admin+ SQL Injection Affected: before 1.12.4 |
Showing 9
