WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
erp
Published
2021-03-01
Title
Multiple Plugins - CSRF Nonce Bypasses
Slug
erp
Published
2023-06-05
Title
WP ERP < 1.12.4 - Reflected Cross-Site Scripting
Slug
erp
Published
2023-06-05
Title
WP ERP < 1.12.4 - Admin+ SQL Injection
Slug
erp
Published
2020-09-26
Title
WP ERP < 1.6.4 - Cross-Site Request Forgery
Slug
erp
Published
2023-10-12
Title
WP ERP < 1.12.7 - Missing Authorization via admin notice dismissal
Slug
erp
Published
2024-01-05
Title
WP ERP < 1.12.9 - Authenticated (Accounting manager+) SQL Injection
Slug
erp
Published
2024-03-28
Title
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.12.9 - Unauthenticated Stored Cross-Site Scripting
Slug
erp
Published
2024-03-28
Title
WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection
Slug
erp
Published
2024-03-28
Title
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.12.9 - Authenticated (Subscriber+) SQL Injection
Slug
erp
Published
2024-03-28
Title
WP ERP <= 1.12.9 - Authenticated (AccountingManager+) SQL Injection
Slug
erp
Published
2024-03-28
Title
WP ERP < 1.30.0 - Authenticated (Accounting Manager+) SQL Injection via id
Slug
erp
Published
2024-05-01
Title
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting < 1.13.2 - Authenticated (AccountingManager+) SQL Injection
Slug
erp
Published
2024-07-10
Title
WP ERP < 1.13.1 - Authenticated (Accounting Manager+) SQL Injection via vendor_id
Slug
erp
Published
2024-10-21
Title
WP ERP < 1.13.3 - Reflected Cross-Site Scripting
Slug
erp
Published
2024-11-12
Title
WP ERP | Complete HR solution with recruitment < 1.13.4 - Admin+ Stored XSS
Slug
erp
Published
2024-11-12
Title
WP ERP < 1.13.4 - Unauthorized Access to Terminated Employee Information
Slug
erp
Published
2025-03-27
Title
WP ERP < 1.14.0 - Missing Authorization
Slug
erp
Published
2025-12-04
Title
ERP < 1.16.8 - Missing Authorization
Slug
erp
Published
2025-11-26
Title
ERP < 1.16.7 - Authenticated (Subscriber+) Information Exposure
Slug
erp
Published
2026-02-05
Title
ERP < 1.16.11 - Authenticated (Crm agent+) SQL Injection
Slug
erp
Published
2026-07-08
Title
ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support < 1.17.6 - Authenticated (HR Manager+) SQL Injection via 'orderby' Parameter
Slug
erp
Published
2026-07-16
Title
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce < 1.17.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Company Location Creation via wp_ajax_erp-company-location AJAX Handler
Slug
erp
Published
2026-07-15
Title
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce < 1.17.6 - Missing Authorization
Slug
erp
Published
2026-08-04
Title
ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support < 1.17.5 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' Parameter
Slug
erp
Published
2026-09-23
Title
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce < 1.17.10 - Authenticated (Author+) SQL Injection