The E Commerce Erp
Approved changes feed: RSS · Atom
cpe:2.3:a:unitybusinesstechnology:the_e-commerce_erp:_purchasing,_inventory,_fulfillment,_manufacturing,_bom,_accounting,_sales_analysis:*:*:*:*:*:*:*:*part: a version: _purchasing,_inventory,_fulfillment,_manufacturing,_bom,_accounting,_sales_analysis update: *
| Vendor | Unitybusinesstechnology (07e85f3f-b879-5b9f-b794-bc5b19962395) |
|---|---|
| Product | The E Commerce Erp (90b3c7d1-a89d-5d01-bab1-ce50d8c2a265) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-4631 |
vulnerable | 2026-06-08 07:29:16.773403 |
Profitori 2.0.6.0 - 2.1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via stocktend_object Endpoint
CRITICAL (9.8)
The Profitori plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the stocktend_object endpoint in versions 2.0.6.0 to 2.1.1.3. This makes it possible to trigger the save_object_as_user() function for objects whose '_datatype' is set to 'users',. This allows unauthenticated attackers to write arbitrary strings straight into the user’s wp_capabilities meta field, potentially elevating the privileges of an existing user account or a newly created one to that of an administrator.
Published: 2025-05-31T06:40:58.133Z
Updated: 2025-06-02T15:49:14.554Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.