Skip to content
OpenAdvisories
High · 7.6 CVE-2024-21747 EUVD-2024-19361GHSA-vc5m-qgwv-5c7r

WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection

Published Jan 8, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting.This issue affects WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting: from n/a through 1.12.8.

Affected products

VendorProductAffectedFixed
weDevs WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting ≤ 1.12.8 —

References