Approved changes feed: RSS · Atom

cpe:2.3:a:wedevs:wp_erp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWedevs (74af2ef9-c755-5b07-93a2-5a3afa051904)
ProductWp Erp (59ffc0ab-f740-5808-8906-7dfc2d960835)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-59522 vulnerable 2026-07-29 01:03:17.491189 WordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerability
MEDIUM (6.5)
Subscriber Broken Access Control in WP ERP <= 1.17.5 versions.
Published: 2026-07-23T11:18:16.958Z
Updated: 2026-07-23T16:00:09.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-31917 vulnerable 2026-06-08 07:57:16.100923 WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP erp allows SQL Injection.This issue affects WP ERP: from n/a through <= 1.16.10.
Published: 2026-03-13T11:41:53.941Z
Updated: 2026-04-29T09:51:57.241Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67546 vulnerable 2026-06-08 07:41:19.979082 WordPress WP ERP plugin <= 1.16.6 - Sensitive Data Exposure vulnerability
MEDIUM (6.5)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs WP ERP erp allows Retrieve Embedded Sensitive Data.This issue affects WP ERP: from n/a through <= 1.16.6.
Published: 2025-12-18T07:22:19.542Z
Updated: 2026-04-28T19:19:25.624Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63008 vulnerable 2026-06-08 07:39:17.158958 WordPress WP ERP plugin <= 1.16.7 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through <= 1.16.7.
Published: 2025-12-09T14:52:27.019Z
Updated: 2026-04-28T16:14:08.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30896 vulnerable 2026-06-08 07:17:02.012829 WordPress WP ERP plugin <= 1.13.4 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through <= 1.13.4.
Published: 2025-03-27T10:55:47.584Z
Updated: 2026-04-28T16:11:59.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47640 vulnerable 2026-06-08 06:48:12.990125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45765 vulnerable 2026-06-08 06:12:43.275529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34008 vulnerable 2026-06-08 06:06:24.196214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.