Edwin Siebel

**Name of the Vulnerable Software and Affected Versions** WP ERP plugin for WordPress versions up to, and including, 1.13.0 **Description** The issue is related to SQL Injection via the `vendor id` parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This allows authenticated attackers, with Accounting Manager access and above, to append additional SQL queries into already existing queries, which can be used to extract sensitive information from the database. **Recommendations** For versions up to, and including, 1.13.0, consider disabling access to the `vendor id` parameter until a patch is available. Restrict access to the SQL query functionality to minimize the risk of exploitation. As a temporary workaround, limit the privileges of users with Accounting Manager access and above to reduce the potential impact of the issue.

**Name of the Vulnerable Software and Affected Versions** WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress versions up to, and including, 1.13.1 **Description** The issue is related to time-based SQL Injection via the `id` parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with accounting manager or admin access, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. **Recommendations** For versions up to, and including, 1.13.1, update to a version higher than 1.13.1 to resolve the issue. As a temporary workaround, consider restricting access to the `id` parameter in the affected SQL query until a patch is available. Restrict access to the plugin's administrative features to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress versions up to, and including, 1.12.9 **Description** The issue is related to time-based SQL Injection via the `id` parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This allows authenticated attackers, with accounting manager or admin privileges or higher, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. **Recommendations** For versions up to, and including, 1.12.9, update to a version higher than 1.12.9 to resolve the issue. As a temporary workaround, consider restricting access to the `id` parameter in the affected SQL queries until a patch is available.

**Name of the Vulnerable Software and Affected Versions** WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress versions up to, and including, 1.12.9 **Description** The issue is related to a time-based SQL Injection vulnerability via the "erp/v1/accounting/v1/transactions/sales" REST API endpoint. This vulnerability is caused by insufficient escaping on the `status` and `customer id` parameters and a lack of sufficient preparation on the existing SQL query. As a result, authenticated attackers with accounting manager or admin privileges and higher can append additional SQL queries into already existing queries to extract sensitive information from the database. **Recommendations** For versions up to, and including, 1.12.9, consider disabling access to the "erp/v1/accounting/v1/transactions/sales" REST API endpoint until a patch is available. Additionally, restrict the use of the `status` and `customer id` parameters in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress versions up to, and including, 1.12.9 **Description** The issue is related to time-based SQL Injection via the `id` parameter in the "erp/v1/accounting/v1/vendors/1/products/" REST route. This vulnerability is caused by insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. As a result, authenticated attackers with admin or accounting manager privileges can append additional SQL queries into already existing queries to extract sensitive information from the database. **Recommendations** For versions up to, and including, 1.12.9, consider disabling access to the "erp/v1/accounting/v1/vendors/1/products/" REST route until a patch is available. Restrict the use of the `id` parameter in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** MyQ Print Server versions prior to 8.2 patch 43 **Description** The issue is related to the administrative interface of the MyQ Print Server, where remote authenticated administrators can execute arbitrary code via PHP scripts. This is due to weaknesses in the authentication procedure, which can be exploited by a remote attacker to execute arbitrary code. **Recommendations** For MyQ Print Server versions prior to 8.2 patch 43, update to version 8.2 patch 43 or later to resolve the issue. As a temporary workaround, consider restricting access to the administrative interface and PHP scripts to minimize the risk of exploitation.