Skip to content
Sign in
7.5 High

CVE-2024-12812 The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before…

Description

The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before 1.13.4 is affected by an IDOR issue where employees can manipulate parameters to access the data of terminated employees.

Affected products and versions

Product Affected versions Fixed in
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting 1.13 earliest → < 1.13.4 1.13.4

Other CVEs of WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting

The 4 CVEs of WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting →
CVE-2024-12808 The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before… 4.8 Medium CVE-2023-2744 The ERP WordPress plugin before 1.12.4 does not properly sanitise and escape the `type` parameter in the… Not rated CVE-2023-2743 The ERP WordPress plugin before 1.12.4 does not sanitise and escape the employee_name parameter before outputting it… 6.1 Medium
Track this CVE