PT-2025-21446 · WordPress · Wp Erp
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin versions prior to 1.13.4
Description:
The issue allows employees to manipulate parameters and access the data of terminated employees.
Recommendations:
For versions prior to 1.13.4, update to version 1.13.4 or later to resolve the issue.
Exploit
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wp Erp