Known vulnerabilities in the Wp Erp plugin
12 security advisories have been published for the Wp Erp plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- WP ERP - Broken Access Control (CVE-2026-59522) MEDIUM
- Wp Erp - Security Vulnerability (CVE-2024-12812) HIGH
- Wp Erp - Cross-Site Scripting (XSS) (CVE-2024-12808) MEDIUM
- Wp Erp - SQL Injection (CVE-2024-6666) HIGH
- Wp Erp - SQL Injection (CVE-2024-1173) HIGH
- Wp Erp - SQL Injection (CVE-2024-0952) HIGH
- Wp Erp - SQL Injection (CVE-2024-0956) HIGH
- Wp Erp - SQL Injection (CVE-2024-0913) HIGH
- Wp Erp - SQL Injection (CVE-2024-0608) HIGH
- Wp Erp - Cross-Site Scripting (XSS) (CVE-2024-0609) HIGH
- Wp Erp - SQL Injection (CVE-2023-2744) HIGH
- Wp Erp - Cross-Site Scripting (XSS) (CVE-2023-2743) MEDIUM