ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce

Güvenlik açıkları

• CVE-2026-18080kimlik doğrulamasız≤ 1.17.8

  ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment

  Kritik 9.8

• CVE-2024-6666giriş gerekir≤ 1.13.0

  WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id

  Yüksek 8.8

• CVE-2026-31917giriş gerekir≤ 1.16.10

  WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerability

  Yüksek 8.5

• CVE-2026-96346yazar+≤ 1.17.9

  WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability

  Yüksek 7.6

• CVE-2026-96343yüksek yetki≤ 1.17.9

  WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability

  Yüksek 7.2

• CVE-2024-1173yüksek yetki≤ 1.13.1

  WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (AccountingManager+) SQL Injection

  Yüksek 7.2

• CVE-2024-0952yönetici≤ 1.12.9

  WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id

  Yüksek 7.2

• CVE-2024-0913yönetici≤ 1.13.0

  WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection

  Yüksek 7.2

• CVE-2026-11421giriş gerekir≤ 1.17.4

  ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17.4 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' Parameter

  Orta 6.5

• CVE-2026-59522abone+≤ 1.17.5

  WordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2026-13011giriş gerekir≤ 1.17.5

  ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support <= 1.17.5 - Authenticated (HR Manager+) SQL Injection via 'orderby' Parame

  Orta 6.5

• CVE-2025-67546giriş gerekir≤ 1.16.6

  WordPress WP ERP plugin <= 1.16.6 - Sensitive Data Exposure vulnerability

  Orta 6.5

• CVE-2024-0608abone+≤ 1.13.1

  WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL Injection

  Orta 6.5

• CVE-2024-47640kimlik doğrulamasız · tıklama gerekir≤ 1.13.2

  WordPress WP ERP plugin <= 1.13.2 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2024-0609kimlik doğrulamasız≤ 1.13.1

  WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting

  Orta 6.1

• CVE-2023-34008kimlik doğrulamasız · tıklama gerekir≤ 1.12.3

  WordPress WP ERP Plugin <= 1.12.3 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2025-30896giriş gerekir≤ 1.13.4

  WordPress WP ERP plugin <= 1.13.4 - Broken Access Control vulnerability

  Orta 5.4

• CVE-2025-63008kimlik doğrulamasız≤ 1.16.7

  WordPress WP ERP plugin <= 1.16.7 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2024-0956yüksek yetki≤ 1.13.0

  WP ERP <= 1.13.0 - Authenticated (AccountingManager+) SQL Injection

  Orta 4.9

• CVE-2024-21747yüksek yetki≤ 1.12.8

  WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection

  Orta 4.9

• CVE-2020-36735kimlik doğrulamasız · tıklama gerekir→ 1.6.4

  WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.6.3 - Cross-Site Request Forgery Bypass

  Orta 4.3

• CVE-2026-15349abone+≤ 1.17.6

  ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Company Location Creat

  Orta 4.3

• CVE-2023-45765giriş gerekir≤ 1.12.6

  WordPress WP ERP plugin <= 1.12.6 - Broken Access Control vulnerability

  Orta 4.3