CVE-2026-96343

The vulnerability affects the WP ERP plugin versions up to 1.17.9, allowing for PHP Object Injection through custom roles. This could lead to remote code execution, enabling attackers to manipulate the application and potentially compromise the underlying server. Organizations using this plugin should prioritize patching to mitigate the risk of exploitation.