Product by weDevs

    weDevs WP ERP

    24 known vulnerabilities in weDevs WP ERP (weDevs), 0 of them actively exploited (CISA KEV).

    Key figures

    24

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in weDevs WP ERP (weDevs)
    HighCVE-2023-2744

    WP ERP < 1.12.4 - Admin+ SQL Injection

    		7.2
    HighCVE-2026-96343

    WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability

    		7.2
    HighCVE-2026-96346

    WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability

    		7.6
    HighCVE-2024-0952

    WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id

    also in 1 other product

    		7.2
    HighCVE-2024-1173

    weDevs WP ERP: SQL Injection

    also in 1 other product

    		7.2
    HighCVE-2024-6666

    WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id

    also in 1 other product

    		8.8
    HighCVE-2024-12812

    WP ERP < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information

    		7.5
    HighCVE-2026-31917

    WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerability

    		8.5
    HighCVE-2024-21747

    WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection

    		7.6
    HighCVE-2024-0913

    WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection

    also in 1 other product

    		7.2
    MediumCVE-2026-59522

    WordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerability

    		6.5
    HighCVE-2024-0609

    weDevs WP ERP: Cross-site Scripting

    also in 1 other product

    		7.2
    MediumCVE-2024-0608

    weDevs WP ERP: SQL Injection

    also in 1 other product

    		6.5
    MediumCVE-2026-25448

    WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability

    		4.3
    HighCVE-2023-34008

    WordPress WP ERP Plugin <= 1.12.3 is vulnerable to Cross Site Scripting (XSS)

    		7.1
    HighCVE-2024-47640

    WordPress WP ERP plugin <= 1.13.2 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2023-2743

    WP ERP < 1.12.4 - Reflected Cross-Site Scripting

    		6.1
    MediumCVE-2025-67546

    WordPress WP ERP plugin <= 1.16.6 - Sensitive Data Exposure vulnerability

    		6.5
    MediumCVE-2024-0956

    WP ERP <= 1.13.0 - Authenticated (AccountingManager+) SQL Injection

    also in 1 other product

    		4.9
    MediumCVE-2025-63008

    WordPress WP ERP plugin <= 1.16.7 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2025-30896

    WordPress WP ERP plugin <= 1.13.4 - Broken Access Control vulnerability

    		5.4
    MediumCVE-2024-12808

    WP ERP | Complete HR solution with recruitment < 1.13.4 - Admin+ Stored XSS

    		4.8
    MediumCVE-2023-45765

    WordPress WP ERP plugin <= 1.12.6 - Broken Access Control vulnerability

    		4.3
    MediumCVE-2020-36735

    weDevs WP ERP: Cross-Site Request Forgery (CSRF)

    also in 1 other product

    		4.3

    All products by weDevs