Skip to content
OpenAdvisories

Product · wedevs

WP ERP

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.6
    CVE-2026-96346

    WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability

    Author SQL Injection in WP ERP <= 1.17.9 versions.

    wedevs WP ERP
  • High 7.2
    CVE-2026-96343

    WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability

    Custom role PHP Object Injection in WP ERP <= 1.17.9 versions.

    wedevs WP ERP
  • High 8.5
    CVE-2026-31917

    WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP erp allows SQL Injection.This issue affects WP ERP: from n/a through <= 1.16.10.

    wedevs WP ERP
  • High 7.1
    CVE-2024-47640

    WordPress WP ERP plugin <= 1.13.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP ERP erp allows Reflected XSS.This issue affects WP ERP: from n/a through <= 1.13.2.

    wedevs WP ERP
  • High 7.1
    CVE-2023-34008

    WordPress WP ERP Plugin <= 1.12.3 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in weDevs WP ERP plugin <= 1.12.3 versions.

    wedevs WP ERP