Description
Subscriber Broken Access Control in WP ERP <= 1.17.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| weDevs | WP ERP | ≤ 1.17.5 | — |
Medium · 6.5
CVE-2026-59522
EUVD-2026-48189GHSA-h3rm-q8jf-8q94
WordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerability
Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack