6.5
Medium
CVE-2025-67546 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs WP ERP erp allows…
Description
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs WP ERP erp allows Retrieve Embedded Sensitive Data.This issue affects WP ERP: from n/a through <= 1.16.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP ERP 1.16 | earliest → 1.16.6 | No fix stated |
Other CVEs of WP ERP
The 11 CVEs of WP ERP →
CVE-2026-25448
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control…
4.3
Medium
CVE-2026-96346
Author SQL Injection in WP ERP <= 1.17.9 versions
7.6
High
CVE-2026-96343
Custom role PHP Object Injection in WP ERP <= 1.17.9 versions
7.2
High
CVE-2026-59522
Subscriber Broken Access Control in WP ERP <= 1.17.5 versions
6.5
Medium