CVE-2024-12812 Information

Description

The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before 1.13.4 has an issue where employees can manipulate parameters to access the data of terminated employees.

Reference

https://wpscan.com/vulnerability/757e76fd-830f-4d1c-8b89-dfad7c9c1f37/