weDevs WP ERP vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting weDevs WP ERP: 6 record(s), with affected versions and fixes.
CVE-2026-96346
High · 7.6
CWE-89 Sep 30, 2026
WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability
Author SQL Injection in WP ERP <= 1.17.9 versions.
CVE-2026-96343
High · 7.2
CWE-502 Sep 30, 2026
WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability
Custom role PHP Object Injection in WP ERP <= 1.17.9 versions.
CVE-2026-59522
Medium · 6.5
CWE-862 Jul 23, 2026
WordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerability
Subscriber Broken Access Control in WP ERP <= 1.17.5 versions.
CVE-2026-31917
High · 8.5
CWE-89 Mar 13, 2026
WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP erp allows SQL Injection.This issue affects WP ERP: from n/a through <= 1.16.10.
CVE-2025-67546
Medium · 6.5
CWE-497 Dec 18, 2025
WordPress WP ERP plugin <= 1.16.6 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs WP ERP erp allows Retrieve Embedded Sensitive Data.This issue affects WP ERP: from n/a through <= 1.16.6.
CVE-2025-63008
Medium · 5.3
CWE-862 Dec 9, 2025
WordPress WP ERP plugin <= 1.16.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through <= 1.16.7.