CVE-2024-12812 in WP ERP Plugin

Tóm tắt

Bởi MITRE • 16/05/2025

The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before 1.13.4 has an issue where employees can manipulate parameters to access the data of terminated employees.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• chịu trách nhiệm: WPScan
• Đặt trước: 19/12/2024
• Tiết lộ: 16/05/2025
• Kiểm duyệt: được chấp nhận
• mục: VDB-309160
• CPE: sẵn sàng
• CWE: CWE-284 (Đã xác nhận)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00521
• KEV: không
• Các hoạt động: rất thấp
• ngành: Hostingprovider

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-12812
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-12812
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-12812/