WordPress plugin

ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce security & vulnerabilities

Q: Does ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce have known vulnerabilities?

Yes. VulnCrest Radar lists 31 known vulnerabilities in ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce: 1 critical, 9 high, 21 medium. None are known to affect version null.

Q: How do I check which version of ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce vulnerability?

CVE-2026-105191, published Nov 4, 2026: ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce < 1.17.11 - Missing Authorization. Severity: Medium (CVSS 4.3).

Q: Is any ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce vulnerability listed in CISA KEV?

No. None of the known ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.

erp— active installsLast vulnerability Nov 4, 2026

No known unpatched vulnerabilities in the latest version

All 31 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

31Known vulnerabilities

Critical1
High9
Medium21
Low0

Vulnerabilities per year

All ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce vulnerabilities

ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce vulnerabilities
Severity	Vulnerability	CVE	Published
High7.2	Unauthenticated Stored Cross-Site Scripting via Inbound Email Body ≤1.17.10Update to 1.17.11	CVE-2026-96894	Oct 30
High7.5	Authenticated (Custom Role+) PHP Object Injection ≤1.17.9Update to 1.17.10	CVE-2026-96343	Sep 28
Critical9.8	Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment ≤1.17.8Update to 1.17.9	CVE-2026-18080	Aug 25
High8.8	Authenticated (Accounting Manager+) SQL Injection via vendor_id ≤1.13.0Update to 1.13.1	CVE-2024-6666	Jul 10, 2024
High7.2	Authenticated (AccountingManager+) SQL Injection ≤1.13.1Update to 1.13.2	CVE-2024-1173	May 1, 2024
High7.2	Authenticated (Accounting Manager+) SQL Injection via id ≤1.12.9Update to 1.13.0	CVE-2024-0952	Mar 28, 2024
High7.2	Authenticated (Accounting Manager+) SQL Injection ≤1.13.0Update to 1.13.1	CVE-2024-0913	Mar 28, 2024
High7.2	Unauthenticated Stored Cross-Site Scripting ≤1.13.1Update to 1.13.2	CVE-2024-0609	Mar 28, 2024
High7.2	Authenticated (Accounting manager+) SQL Injection ≤1.12.8Update to 1.12.9	CVE-2024-21747	Jan 5, 2024
High7.2	Authenticated (Administrator+) SQL Injection via 'type' <1.12.4Update to 1.12.4	CVE-2023-2744	Jun 5, 2023

High7.2
Unauthenticated Stored Cross-Site Scripting via Inbound Email Body
≤1.17.10Update to 1.17.11
CVE-2026-96894Oct 30
High7.5
Authenticated (Custom Role+) PHP Object Injection
≤1.17.9Update to 1.17.10
CVE-2026-96343Sep 28
Critical9.8
Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment
≤1.17.8Update to 1.17.9
CVE-2026-18080Aug 25
High8.8
Authenticated (Accounting Manager+) SQL Injection via vendor_id
≤1.13.0Update to 1.13.1
CVE-2024-6666Jul 10, 2024
High7.2
Authenticated (AccountingManager+) SQL Injection
≤1.13.1Update to 1.13.2
CVE-2024-1173May 1, 2024
High7.2
Authenticated (Accounting Manager+) SQL Injection via id
≤1.12.9Update to 1.13.0
CVE-2024-0952Mar 28, 2024
High7.2
Authenticated (Accounting Manager+) SQL Injection
≤1.13.0Update to 1.13.1
CVE-2024-0913Mar 28, 2024
High7.2
Unauthenticated Stored Cross-Site Scripting
≤1.13.1Update to 1.13.2
CVE-2024-0609Mar 28, 2024
High7.2
Authenticated (Accounting manager+) SQL Injection
≤1.12.8Update to 1.12.9
CVE-2024-21747Jan 5, 2024
High7.2
Authenticated (Administrator+) SQL Injection via 'type'
<1.12.4Update to 1.12.4
CVE-2023-2744Jun 5, 2023

ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce: common questions

Does ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce have known vulnerabilities?

Yes. VulnCrest Radar lists 31 known vulnerabilities in ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce: 1 critical, 9 high, 21 medium. None are known to affect version null.

How do I check which version of ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce vulnerability?

CVE-2026-105191, published Nov 4, 2026: ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce < 1.17.11 - Missing Authorization. Severity: Medium (CVSS 4.3).

Is any ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce vulnerability listed in CISA KEV?

No. None of the known ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.