Skip to content
OpenAdvisories

Vendor

Webkul

52 known vulnerabilities.

Products

QloApps 23 Bagisto 16 Aureus ERP 8 Krayin CRM 2 WooCommerce Point of Sale 1 Medical Prescription Attachment Plugin for WooCommerce 1 Ajax Quiz 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-112193

    Webkul Aureus ERP UserForm.php weak password

    A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserForm.php. Performing a manipulation of the argument Password results in weak pas…

    Webkul Aureus ERP
  • Low 3.7
    CVE-2026-110218

    Aureus ERP through 1.6.0 Unpublished Blog Post Disclosure via Direct URL

    Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unpublished draft blog posts via the customer-facing post view page. Attackers who know or guess a post slug can retrieve the full title, con…

    Webkul Aureus ERP
  • Low 2.7
    CVE-2026-101139

    Webkul Bagisto Invoice Mass Status Update state authorization

    A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Invoice Mass Status Update. Performing a manipulation results in missing authorizatio…

    Webkul Bagisto
  • Low 3.5
    CVE-2026-19995

    Webkul Bagisto RMA Message send-message cross site scripting

    A vulnerability was determined in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /customer/account/rma/send-message of the component RMA Message Handler. This manipulation of the argument Message causes cross site scripting. Remote explo…

    Webkul Bagisto
  • Low 2.7
    CVE-2026-19837

    Webkul Bagisto Customer Search search information disclosure

    A weakness has been identified in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /admin/customers/search of the component Customer Search. Executing a manipulation of the argument Query can lead to information disclosure. The attack may …

    Webkul Bagisto
  • Low 3.8
    CVE-2026-19835

    Webkul Bagisto Customer Item Deletion Endpoint access control

    A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the component Customer Item Deletion Endpoint. Such manipulation leads to improper access controls. The attack can be launched remotely…

    Webkul Bagisto
  • Low 3.5
    CVE-2025-3568 Public exploit

    Webkul Krayin CRM SVG File edit cross site scripting

    A vulnerability has been found in Webkul Krayin CRM up to 2.1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/settings/users/edit/ of the component SVG File Handler. The manipulation leads to cros…

    Webkul Krayin CRM
  • Low 2.4
    CVE-2023-2925

    Webkul krayin crm Edit Person Page 2 cross site scripting

    A vulnerability, which was classified as problematic, was found in Webkul krayin crm 1.2.4. This affects an unknown part of the file /admin/contacts/organizations/edit/2 of the component Edit Person Page. The manipulation of the argument Organization leads to…

    Webkul Krayin CRM