Advisories · Technology
wedevs ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce.
Every CVE that names wedevs ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.10 - Unauthenticated Stored Cross-Site Scripting via Inbound Email Body
- wedevs ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · CVSS 9+
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment
- wedevs ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
- Unrestricted file upload
- CVSS 6.5 Medium
ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17.4 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' Parameter
- wedevs ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
- SQL injection
- CVSS 4.3 Medium
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Company Location Creation via wp_ajax_erp-company-location AJ…
- wedevs ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
- Broken access control
- CVSS 6.5 Medium
ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support <= 1.17.5 - Authenticated (HR Manager+) SQL Injection via 'orderby' Parameter
- wedevs ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
- SQL injection