Volerion logoVolerion
Volerion logoVolerion

weDevs WP ERP Missing Authorization Vulnerability Allowing Access Control Misconfiguration

Vulnerability

A missing authorization vulnerability has been identified in the weDevs WP ERP plugin, specifically in versions through 1.16.7. This vulnerability allows for the exploitation of improperly configured access control security levels, leading to broken access control issues.

Impact

Exploitation of this vulnerability could result in unauthorized access to certain functionalities or data within the WP ERP plugin, due to the mismanagement of access control rights.

Added: Dec 9, 2025, 6:57 PM
Updated: Dec 9, 2025, 6:57 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
1.3
exploitability
6.8
remediation
0.0
relevance
1.4
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.