ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: wedevs

CVE ID	Title	CVSS	Severity	Published
CVE-2026-18080	ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment CWE-434	9.8	Critical	2026-08-26
CVE-2026-11421	ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17.4 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' Parameter CWE-89	6.5	Medium	2026-08-05
CVE-2026-15349	ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Company Location Creation via wp_ajax_erp-company-location AJAX Handler CWE-862	4.3	Medium	2026-07-17
CVE-2026-13011	ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support <= 1.17.5 - Authenticated (HR Manager+) SQL Injection via 'orderby' Parameter CWE-89	6.5	Medium	2026-07-09

All 4 known CVE vulnerabilities affecting ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce with full Chinese analysis, references, and POCs where available.