CVE-2024-12812: WP ERP < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information
The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before 1.13.4 is affected by an IDOR issue where employees can manipulate parameters to access the data of terminated employees.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12812?
The severity of CVE-2024-12812 is categorized as high due to the potential unauthorized access to sensitive employee data.
How do I fix CVE-2024-12812?
To fix CVE-2024-12812, update the WP ERP plugin to version 1.13.4 or later.
What systems are affected by CVE-2024-12812?
CVE-2024-12812 affects the WP ERP WordPress plugin versions prior to 1.13.4.
What impact does CVE-2024-12812 have on data security?
CVE-2024-12812 can lead to unauthorized access to the data of terminated employees, posing a significant data security risk.
Who is affected by CVE-2024-12812?
Organizations using the vulnerable versions of the WP ERP plugin for HR purposes are affected by CVE-2024-12812.