Unrated
WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection
CVE-2024-21747
First seen on SecPulse
Original description The description as published by the source.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting.This issue affects WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting: from n/a through 1.12.8.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory patchstack.com
- web wordpress.org