Known vulnerabilities in the Erp plugin
11 security advisories have been published for the Erp plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- ERP - Remote Code Execution (CVE-2026-18080) CRITICAL
- Erp - SQL Injection (CVE-2026-11421) MEDIUM
- Erp - Broken Access Control (CVE-2026-15349) MEDIUM
- Erp - SQL Injection (CVE-2026-13011) MEDIUM
- Erp - SQL Injection (CVE-2024-1173) HIGH
- Erp - SQL Injection (CVE-2024-0956) HIGH
- Erp - SQL Injection (CVE-2024-0913) HIGH
- Erp - SQL Injection (CVE-2024-0608) HIGH
- Erp - Cross-Site Scripting (XSS) (CVE-2024-0609) HIGH
- Erp - SQL Injection (CVE-2023-2744) HIGH
- Erp - Cross-Site Scripting (XSS) (CVE-2023-2743) MEDIUM