Skip to content
OpenAdvisories

Product · wedevs

ERP

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-126808

    WP ERP through 1.17.11 Incorrect Authorization via HRM Job-Info AJAX Handlers

    weDevs ERP (WP ERP) through 1.17.11 contains an incorrect authorization vulnerability that allows authenticated employees to edit their own HR records because HRM AJAX handlers check erp_edit_employee instead of erp_manage_jobinfo. Attackers can post their ow…

    wedevs ERP