CVE-2024-12812
WP ERP < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
WP ERP < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information
The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before 1.13.4 has an issue where employees can manipulate parameters to access the data of terminated employees.
Reserved 2024-12-19 | Published 2025-05-15 | Updated 2025-05-20 | Assigner WPScanCWE-284 Improper Access Control
Pedro Cuco (Illex)
WPScan
wpscan.com/...rability/757e76fd-830f-4d1c-8b89-dfad7c9c1f37/
Support options
