Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting 1.13.4 Clear all filters
TI-2024-11873 CVE-2024-12812 · GHSA-r77g-4w8g-2vqq

WP ERP < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information

Priority HIGH 72

The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before 1.13.4 is affected by an IDOR issue where employees can manipulate parameters to access the data of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00543 Published 2025-05-15 Fixed in 1.13.4 CWE-862
TI-2024-11869 CVE-2024-12808 · GHSA-fq7q-wgm6-7rqj

WP ERP | Complete HR solution with recruitment < 1.13.4 - Admin+ Stored XSS

Priority MEDIUM 55

The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before 1.13.4 does not sanitise and escape some of its settings, which could allow high privilege users su…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 1.13.4 CWE-79