{"id":"CVE-2026-105191","title":"WP ERP < 1.17.11 - Subscriber+ Sensitive Data Disclosure via Audit Log","summary":"The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin before 1.17.11 does not perform a capability check on an AJAX action that returns the stored before-and-after values of a record change, allowing any aut…","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvssSource":"adp","cwe":["CWE-200"],"product":"ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce","affected":["erp_complete_hr_accounting_crm_suite_built_for_woocommerce < 1.17.11"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-04T14:07:32.416634Z"},"published":"2026-11-04","updated":"2026-11-04","sourceUpdated":"2026-11-04T14:18:23.279Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-105191","references":[{"url":"https://wpscan.com/vulnerability/e9d5db8d-5eac-404e-ac29-847689af0d53/"}],"tags":["cve.org"],"epss":0.00272,"epssPercentile":0.19703,"ingestedAt":"2026-11-05T21:36:00.376Z","slug":"CVE-2026-105191","body":"## Overview\n\nThe ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin before 1.17.11 does not perform a capability check on an AJAX action that returns the stored before-and-after values of a record change, allowing any authenticated user, including Subscribers, to read other users' sensitive HR, CRM and Accounting data by enumerating record identifiers.\n\n## Affected\n\n- `erp_complete_hr_accounting_crm_suite_built_for_woocommerce < 1.17.11`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}