CVE-2023-45765

MEDIO 4.3CVE-2023-45765 · Published 02/01/2025 · updated 17/06/2026

In breve

CVE-2023-45765 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda wp erp (wedevs).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.38%, superiore al 32.2% delle vulnerabilità.
Correzione: aggiornare a 1.12.7 o successiva.

Package	Affected versions	Patched versions
wp erp wedevs	`< 1.12.7`	`1.12.7`

Description

Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through <= 1.12.6.

References

patchstack.com/database/Wordpress/Plugin/erp/vulnerability/wordpress-wp-erp-plugin-1-12-6-broken-access-control-vulnerability · Third Party Advisory

Altre vulnerabilità di wp erp

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wp erp

wedevs

< 1.12.7

1.12.7

Altre vulnerabilità di wp erp

Vedi tutto →