Vulnerabilities / ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce vulnerabilities
Advisories WPSec published for ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce. Other sources may list more. Its attack surface: ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-29 | WPSEC-2026-1888 | ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.10 - Authenticated (Employee+) Insecure Direct Object Reference to Private Post Disclosure via Announcement Viewer | Medium 4.3 | 1.17.11 |
| 2026-10-29 | WPSEC-2026-1887 | ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.10 - Unauthenticated Stored Cross-Site Scripting via Inbound Email Body | Medium 5.4 | 1.17.11 |
| 2026-10-29 | WPSEC-2026-1886 | ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.10 - Missing Authorization to Authenticated (Subscriber+) Audit Log Disclosure | Medium 4.3 | 1.17.11 |
License: CC BY 4.0