← WordPress Vulnerabilities
WordPress security by component

WP ERP Pro

WP ERP Pro is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 22, 2026; the highest CVE/CNA score is 7.5.

Plugin slug: wp-erp-pro

CVE-2026-4834: WP ERP Pro: SQL injection

WP ERP Pro is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 1.5.1.

PublishedMay 22, 2026
Known safe version> 1.5.1
Safe version
May 22, 2026 CVE-2026-4834
WP ERP Pro: SQL injection
WP ERP Pro is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 1.5.1.
> 1.5.1
CVE7.5
NVDPending