Skip to content
OpenAdvisories

Product · wedevs

WP ERP Pro

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-4834

    WP ERP Pro <= 1.5.1 - Unauthenticated SQL Injection via 'search_key' Parameter

    The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'search_key' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existi…

    wedevs WP ERP Pro Web / CMS