PatchTheCVEwp erp vulnerabilities and fixes
Recent CVEs affecting wp erp, with upgrade or downgrade steps. 7 tracked.
Also searched as: wperp.
wp erp has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-05-15. Highest priority: CVE-2024-12812 (score 48/100).
- CVE-2024-6666 HIGH 8.8 UPGRADE The WP ERP plugin for WordPress is vulnerable to SQL Injection via the ‘vendor_id’ and 'status' parameter in a
- CVE-2024-47640 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs W
- CVE-2024-1173 HIGH 7.2 UPGRADE The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for Wo
- CVE-2024-12812 HIGH 7.5 UPGRADE The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plu
- CVE-2024-12808 MEDIUM 4.8 UPGRADE The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plu
- CVE-2024-0952 HIGH 7.2 UPGRADE The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for Wo
- CVE-2023-45765 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Contr
FAQ
How do I fix wp erp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wp erp being exploited right now?
None of the tracked wp erp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wp erp CVE should I patch first?
CVE-2024-12812 currently ranks highest (48/100): The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plu.