https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 04:54:40 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-105191 <p>The ERP: Complete HR, Accounting &amp; CRM Suite Built for WooCommerce WordPress plugin before 1.17.11 does not perform a capability check on an AJAX action that returns the stored before-and-after values of a record change, allowing any authenticated user, including Subscribers, to read other users&#39; sensitive HR, CRM and Accounting data by enumerating record identifiers.</p> <p>The ERP: Complete HR, Accounting &amp; CRM Suite Built for WooCommerce WordPress plugin before 1.17.11 does not perform a capability check on an AJAX action that returns the stored before-and-after values of a record change, allowing any authenticated user, including Subscribers, to read other users&#39; sensitive HR, CRM and Accounting data by enumerating record identifiers.</p> https://db.gcve.eu/vuln/fkie_cve-2026-105191 https://db.gcve.eu/vuln/ghsa-6vcx-gwjm-xrg8 <p>The ERP: Complete HR, Accounting &amp; CRM Suite Built for WooCommerce WordPress plugin before 1.17.11 does not perform a capability check on an AJAX action that returns the stored before-and-after values of a record change, allowing any authenticated user, including Subscribers, to read other users&#39; sensitive HR, CRM and Accounting data by enumerating record identifiers.</p> <p>The ERP: Complete HR, Accounting &amp; CRM Suite Built for WooCommerce WordPress plugin before 1.17.11 does not perform a capability check on an AJAX action that returns the stored before-and-after values of a record change, allowing any authenticated user, including Subscribers, to read other users&#39; sensitive HR, CRM and Accounting data by enumerating record identifiers.</p> https://db.gcve.eu/vuln/ghsa-6vcx-gwjm-xrg8