<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: wedevs-erp-complete-hr-accounting-crm-suite-built-for-woocommerce</title><description>Every new CVE for wedevs-erp-complete-hr-accounting-crm-suite-built-for-woocommerce.</description><link>https://agentprime.io/</link><item><title>CVE-2026-96894: ERP: Complete HR, Accounting &amp; CRM Suite Built for WooCommerce &lt;= 1.17.10 - Unauthenticated Stored Cross-Site Scripting via Inbound Email Body</title><link>https://agentprime.io/advisories/CVE-2026-96894/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96894/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 17:15:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18080: ERP: Complete HR, Accounting &amp; CRM Suite Built for WooCommerce &lt;= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment</title><link>https://agentprime.io/advisories/CVE-2026-18080/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18080/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Aug 2026 11:05:44 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-11421: ERP: Complete HR, Accounting &amp; CRM Suite with WooCommerce CRM Support &lt;= 1.17.4 - Authenticated (Custom+) SQL Injection via &apos;erpadvancefilter&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-11421/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-11421/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Aug 2026 04:25:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15349: ERP: Complete HR, Accounting &amp; CRM Suite Built for WooCommerce &lt;= 1.17.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Company Location Creation via wp_ajax_erp-company-location AJ…</title><link>https://agentprime.io/advisories/CVE-2026-15349/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15349/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Jul 2026 03:43:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13011: ERP: Complete HR, Accounting &amp; CRM Suite with Recruitment and WooCommerce CRM Support &lt;= 1.17.5 - Authenticated (HR Manager+) SQL Injection via &apos;orderby&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-13011/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13011/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jul 2026 07:55:12 GMT</pubDate><category>CVE</category></item></channel></rss>