8.5
Élevée
CVE-2026-31917 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP erp allows SQL Injection.This issue affects WP ERP: from n/a through <= 1.16.10.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP ERP 1.16 | premières → 1.16.10 | Pas de correctif indiqué |
Autres CVE de WP ERP
Les 11 CVE de WP ERP →
CVE-2026-25448
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control…
4.3
Moyenne
CVE-2026-96346
Author SQL Injection in WP ERP <= 1.17.9 versions
7.6
Élevée
CVE-2026-96343
Custom role PHP Object Injection in WP ERP <= 1.17.9 versions
7.2
Élevée
CVE-2026-59522
Subscriber Broken Access Control in WP ERP <= 1.17.5 versions
6.5
Moyenne