Extension WordPress

Vulnérabilités The E-Commerce ERP: Purchasing, Inventory, Fulfillment, Manufacturing, BOM, Accounting, Sales Analysis

Cette page rassemble les failles publiées pour The E-Commerce ERP: Purchasing, Inventory, Fulfillment, Manufacturing, BOM, Accounting, Sales Analysis, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
2Critiques
0Avec correctif
9,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de The E-Commerce ERP: Purchasing, Inventory, Fulfillment, Manufacturing, BOM, Accounting, Sales Analysis

3 fiches

CVE-2025-52800 Moyenne · 5,3
The E-Commerce ERP: Purchasing, Inventory, Fulfillment, Manufacturing, BOM, Accounting, Sales Analysis

The E-Commerce ERP <= 2.1.1.3 – Missing Authorization

The The E-Commerce ERP: Purchasing, Inventory, Fulfillment, Manufacturing, BOM, Accounting, Sales Analysis plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.1.1.3. This…

Versions affectées

*-2.1.1.3

Correctif

Non indiqué

Publication

21/07/2025

CVE-2025-52836 Critique · 9,8
The E-Commerce ERP: Purchasing, Inventory, Fulfillment, Manufacturing, BOM, Accounting, Sales Analysis

The E-Commerce ERP <= 2.1.1.3 – Unauthenticated Privilege Escalation

The The E-Commerce ERP: Purchasing, Inventory, Fulfillment, Manufacturing, BOM, Accounting, Sales Analysis plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.1.3. This makes it possible for unauthenticated attackers to elevate their…

Versions affectées

*-2.1.1.3

Correctif

Non indiqué

Publication

11/07/2025

CVE-2025-4631 Critique · 9,8
The E-Commerce ERP: Purchasing, Inventory, Fulfillment, Manufacturing, BOM, Accounting, Sales Analysis

Profitori 2.0.6.0 – 2.1.1.3 – Missing Authorization to Unauthenticated Privilege Escalation via stocktend_object Endpoint

The Profitori plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the stocktend_object endpoint in versions 2.0.6.0 to 2.1.1.3. This makes it possible to trigger the save_object_as_user() function for objects whose '_datatype'…

Versions affectées

2.0.6.0-2.1.1.3

Correctif

Non indiqué

Publication

30/05/2025

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités