📦 Wp Erp

This vulnerability in the WP ERP WordPress plugin allows employees to access terminated employees' data by manipulating parameters. It affects WordPress sites using WP ERP plugin versions before 1.13....

This CVE describes a reflected cross-site scripting (XSS) vulnerability in the weDevs WP ERP WordPress plugin. Attackers can inject malicious scripts via crafted URLs that execute when victims visit t...

This SQL injection vulnerability in the WP ERP WordPress plugin allows authenticated attackers with Accounting Manager privileges to inject malicious SQL queries via the 'vendor_id' parameter. This ca...

This vulnerability allows authenticated attackers with accounting manager or admin access to perform time-based SQL injection attacks via the id parameter in the WP ERP plugin. Attackers can extract s...

This vulnerability allows authenticated attackers with accounting manager or admin privileges in WordPress to perform time-based SQL injection attacks via the id parameter in the WP ERP plugin. Attack...

This vulnerability allows authenticated attackers with accounting manager or admin privileges in the WP ERP plugin to perform time-based SQL injection attacks. By exploiting insufficient input validat...

This CVE describes a union-based SQL injection vulnerability in the WP ERP plugin for WordPress. Authenticated attackers with subscriber-level access or higher can exploit the 'email' parameter to exe...

This SQL injection vulnerability in the WP ERP WordPress plugin allows attackers to execute arbitrary SQL commands on the database. It affects all WordPress sites running WP ERP version 1.12.8 or earl...

Unauthenticated reflected cross-site scripting (XSS) vulnerability in the weDevs WP ERP WordPress plugin allows attackers to inject malicious scripts into web pages viewed by users. This affects WordP...

This CVE describes a SQL injection vulnerability in the ERP WordPress plugin affecting versions before 1.12.4. The vulnerability allows authenticated users with administrative privileges to execute ar...

This vulnerability in the WP ERP WordPress plugin allows high-privilege users (like administrators) to inject malicious scripts into plugin settings, which then execute when other users view those set...