CVE-2026-96346: WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability
Published Sep 30, 2026
·Updated
Author SQL Injection in WP ERP <= 1.17.9 versions.
Affected Software
1 affected component
WordPress WP ERP<=1.17.9
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress WP ERP pluginto a version that resolves this vulnerability.Fixed in 1.17.10
Event History
Sep 30, 2026
CVE Published
via MITRE·12:27 PM
Data Sourced
via MITRE·12:27 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access and conditions are required to exploit this issue?
An attacker must have high privileges. The attack can be performed over the network, has low attack complexity, and does not require user interaction.
2
What is the expected impact if exploitation succeeds?
The vulnerability is rated high severity with a 7.6 score. It can result in high confidentiality impact and low availability impact; no integrity impact is indicated.