ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce

Уязвимости

• CVE-2026-18080без авторизации≤ 1.17.8

  ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment

  Критич. 9.8

• CVE-2024-6666нужен вход≤ 1.13.0

  WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id

  Высокий 8.8

• CVE-2026-31917нужен вход≤ 1.16.10

  WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2026-96346автор+≤ 1.17.9

  WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability

  Высокий 7.6

• CVE-2026-96343высокие права≤ 1.17.9

  WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability

  Высокий 7.2

• CVE-2024-1173высокие права≤ 1.13.1

  WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (AccountingManager+) SQL Injection

  Высокий 7.2

• CVE-2024-0952админ≤ 1.12.9

  WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id

  Высокий 7.2

• CVE-2024-0913админ≤ 1.13.0

  WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection

  Высокий 7.2

• CVE-2026-11421нужен вход≤ 1.17.4

  ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17.4 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' Parameter

  Средний 6.5

• CVE-2026-59522подписчик+≤ 1.17.5

  WordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2026-13011нужен вход≤ 1.17.5

  ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support <= 1.17.5 - Authenticated (HR Manager+) SQL Injection via 'orderby' Parame

  Средний 6.5

• CVE-2025-67546нужен вход≤ 1.16.6

  WordPress WP ERP plugin <= 1.16.6 - Sensitive Data Exposure vulnerability

  Средний 6.5

• CVE-2024-0608подписчик+≤ 1.13.1

  WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL Injection

  Средний 6.5

• CVE-2024-47640без авторизации · нужен клик≤ 1.13.2

  WordPress WP ERP plugin <= 1.13.2 - Reflected Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2024-0609без авторизации≤ 1.13.1

  WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting

  Средний 6.1

• CVE-2023-34008без авторизации · нужен клик≤ 1.12.3

  WordPress WP ERP Plugin <= 1.12.3 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2025-30896нужен вход≤ 1.13.4

  WordPress WP ERP plugin <= 1.13.4 - Broken Access Control vulnerability

  Средний 5.4

• CVE-2025-63008без авторизации≤ 1.16.7

  WordPress WP ERP plugin <= 1.16.7 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2024-0956высокие права≤ 1.13.0

  WP ERP <= 1.13.0 - Authenticated (AccountingManager+) SQL Injection

  Средний 4.9

• CVE-2024-21747высокие права≤ 1.12.8

  WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection

  Средний 4.9

• CVE-2020-36735без авторизации · нужен клик→ 1.6.4

  WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.6.3 - Cross-Site Request Forgery Bypass

  Средний 4.3

• CVE-2026-15349подписчик+≤ 1.17.6

  ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Company Location Creat

  Средний 4.3

• CVE-2023-45765нужен вход≤ 1.12.6

  WordPress WP ERP plugin <= 1.12.6 - Broken Access Control vulnerability

  Средний 4.3