Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-12812

WP ERP < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information

Description

The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before 1.13.4 is affected by an IDOR issue where employees can manipulate parameters to access the data of terminated employees.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting

Default version status: unaffected

  • 0 to < 1.13.4affected

References