Advisories · Technology
weDevs WP ERP.
Every CVE that names weDevs WP ERP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability
- weDevs WP ERP
- Broken access control
- CVSS 7.6 High
WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability
- weDevs WP ERP
- SQL injection
- CVSS 7.2 High
WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability
- weDevs WP ERP
- Insecure deserialization
- CVSS 6.5 Medium
WordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerability
- weDevs WP ERP
- Broken access control
- CVSS 8.5 High
WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerability
- weDevs WP ERP
- SQL injection
- CVSS 6.5 Medium
WordPress WP ERP plugin <= 1.16.6 - Sensitive Data Exposure vulnerability
- weDevs WP ERP
- Information disclosure
- CVSS 5.3 Medium
WordPress WP ERP plugin <= 1.16.7 - Broken Access Control vulnerability
- weDevs WP ERP
- Broken access control
- CVSS 5.4 Medium
WordPress WP ERP plugin <= 1.13.4 - Broken Access Control vulnerability
- weDevs WP ERP
- Broken access control
- CVSS 4.3 Medium
WordPress WP ERP plugin <= 1.12.6 - Broken Access Control vulnerability
- weDevs WP ERP
- Broken access control
- CVSS 7.1 High
WordPress WP ERP plugin <= 1.13.2 - Reflected Cross Site Scripting (XSS) vulnerability
- weDevs WP ERP
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress WP ERP Plugin <= 1.12.3 is vulnerable to Cross Site Scripting (XSS)
- weDevs WP ERP
- Cross-site scripting (XSS)