Description
Custom role PHP Object Injection in WP ERP <= 1.17.9 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| weDevs | WP ERP | ≤ 1.17.9 | — |
High · 7.2
CVE-2026-96343
EUVD-2026-89856GHSA-rr94-6pcf-8wvr
WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack