← CVE Intelligence

CVE-2024-12812

WP ERP < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information PUBLISHED

Description (CNA)

The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before 1.13.4 is affected by an IDOR issue where employees can manipulate parameters to access the data of terminated employees.

Affected (CNA)

Vendor / productVersions
Unknown / WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accountingaffected 0 before 1.13.4

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.