wedevs erp vulnerabilities in 2026, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 5.3CVE-2026-126808EPSS 0.3%2026-11-11

   weDevs ERP (WP ERP) through 1.17.11 contains an incorrect authorization vulnerability that allows authenticated employees to edit their own HR records because HRM AJAX handlers check erp_edit_employee instead of erp_manage_jobinfo. Attacke…