7.1
High
CVE-2023-34008 Unauth
Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in weDevs WP ERP plugin <= 1.12.3 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP ERP 1.12 | earliest → 1.12.3 | No fix stated |
Other CVEs of WP ERP
The 11 CVEs of WP ERP →
CVE-2026-25448
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control…
4.3
Medium
CVE-2026-96346
Author SQL Injection in WP ERP <= 1.17.9 versions
7.6
High
CVE-2026-96343
Custom role PHP Object Injection in WP ERP <= 1.17.9 versions
7.2
High
CVE-2026-59522
Subscriber Broken Access Control in WP ERP <= 1.17.5 versions
6.5
Medium