WP ERP
weDevs
Developer
1.17.9
Latest version
5,000
Installations
No date
Last updated
Vulnerability history
0 present
23 patched
10 Mitigation rules
- Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment vulnerability<= 1.17.826/08/2026
- Authenticated (Custom+) SQL Injection vulnerability<= 1.17.404/08/2026
- Broken Access Control vulnerability<= 1.17.515/07/2026
- SQL Injection vulnerability<= 1.16.1005/02/2026
- Authenticated (Accounting Manager+) SQL Injection vulnerability<= 1.13.003/02/2026
- Broken Access Control vulnerability<= 1.16.704/12/2025
- Sensitive Data Exposure vulnerability<= 1.16.626/11/2025
- Custom+ Unauthorized Access to Terminated Employee Information vulnerability< 1.13.419/05/2025
- Admin+ Stored XSS vulnerability< 1.13.419/05/2025
- Broken Access Control vulnerability<= 1.13.427/03/2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 1.13.221/10/2024
- Authenticated (Accounting Manager+) SQL Injection via vendor_id vulnerability<= 1.13.011/07/2024
- Authenticated (AccountingManager+) SQL Injection vulnerability<= 1.13.103/05/2024
- Cross Site Scripting (XSS) vulnerability<= 1.13.101/04/2024
- SQL Injection vulnerability<= 1.13.129/03/2024
- SQL Injection vulnerability<= 1.13.029/03/2024
- Authenticated (Accounting Manager+) SQL Injection via id vulnerability<= 1.12.929/03/2024
- SQL Injection vulnerability<= 1.12.805/01/2024
- Broken Access Control vulnerability<= 1.12.612/10/2023
- Reflected Cross-Site Scripting (XSS) vulnerability< 1.12.427/06/2023
- Reflected Cross Site Scripting (XSS) vulnerability<= 1.12.302/06/2023
- Cross-Site Request Forgery (CSRF) vulnerability<= 1.7.401/03/2021
- Cross-Site Request Forgery (CSRF) vulnerability<= 1.6.316/09/2020