CVE-2026-96346

The vulnerability allows for SQL injection in WP ERP versions up to 1.17.9, potentially enabling attackers to manipulate database queries and gain unauthorized access to sensitive data. Organizations using this plugin should prioritize patching or upgrading to mitigate the risk of data breaches and unauthorized data manipulation. Immediate action is recommended for all users of affected versions to protect their systems from exploitation.