CVE-2026-15349 | wedevs ERP Complete HR Accounting CRM Suite Plugin up to 1.17.6 on WordPress Company Location authorization

July 17, 2026 Yanac

A vulnerability was found in wedevs ERP Complete HR Accounting CRM Suite Plugin up to 1.17.6 on WordPress. It has been rated as critical. Affected by this issue is some unknown functionality of the component Company Location. Performing a manipulation results in authorization bypass.

This vulnerability was named CVE-2026-15349. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More