Skip to content

Known vulnerabilities in wedevs WP ERP

Is your version affected?

CVE Summary Score Published
CVE-2026-25448 Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control… 4.3 Medium Oct 29, 2026
CVE-2026-96346 Author SQL Injection in WP ERP <= 1.17.9 versions 7.6 High Sep 30, 2026
CVE-2026-96343 Custom role PHP Object Injection in WP ERP <= 1.17.9 versions 7.2 High Sep 30, 2026
CVE-2026-59522 Subscriber Broken Access Control in WP ERP <= 1.17.5 versions 6.5 Medium Jul 23, 2026
CVE-2026-31917 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP… 8.5 High Mar 13, 2026
CVE-2025-67546 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs WP ERP erp allows… 6.5 Medium Dec 18, 2025
CVE-2025-63008 Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control… 5.3 Medium Dec 9, 2025
CVE-2025-30896 Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control… 5.4 Medium Mar 27, 2025
CVE-2023-45765 Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control… 4.3 Medium Jan 2, 2025
CVE-2024-47640 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP ERP… 7.1 High Oct 29, 2024
CVE-2023-34008 Unauth 7.1 High Aug 30, 2023

Other wedevs products