7.6
High
CVE-2024-21747 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP |…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting.This issue affects WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting: from n/a through 1.12.8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting 1.12 | earliest → 1.12.8 | No fix stated |
Other CVEs of WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting
The 9 CVEs of WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting →
CVE-2024-6666
The WP ERP plugin for WordPress is vulnerable to SQL Injection via the ‘vendor_id’ and 'status' parameter in all…
8.8
High
CVE-2024-1173
The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is…
7.2
High
CVE-2024-0952
The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is…
7.2
High
CVE-2024-0956
The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is…
4.9
Medium