WP ERP WordPress Plugin Unauthorized Access to Terminated Employee Data Vulnerability

A vulnerability exists in the WP ERP WordPress plugin, specifically in versions prior to 1.13.4, allowing employees to manipulate parameters and access data belonging to terminated employees. This issue arises from inadequate access controls, enabling unauthorized retrieval of sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information regarding terminated employees, potentially including personal and employment-related data.

Remediation

Users are advised to update the WP ERP WordPress plugin to version 1.13.4 or later.