Wedevs Wp Erp vulnerabilities, page 2

23 vulnerabilities

Known vulnerabilities in Wedevs Wp Erp, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2023-2744unknownwp erp | complete hr solution with recruitment & job listings | woocommerce crm & accounting+2
EPSS score
2.63%
The ERP WordPress plugin before 1.12.4 does not properly sanitise and escape the `type` parameter in the `erp/v1/accounting/v1/people` REST API endpoint before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.4.3CVE-2023-45765wedevswp_erp+1
EPSS score
0.38%
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through <= 1.12.6.7.1CVE-2023-34008wedevswp_erp+1
EPSS score
0.46%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in weDevs WP ERP plugin <= 1.12.3 versions.