{"affected":[{"defaultStatus":"unaffected","product":"ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"1.17.11","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-105191","cwes":["CWE-200"],"description":"The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin before 1.17.11 does not perform a capability check on an AJAX action that returns the stored before-and-after values of a record change, allowing any authenticated user, including Subscribers, to read other users' sensitive HR, CRM and Accounting data by enumerating record identifiers.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/e9d5db8d-5eac-404e-ac29-847689af0d53/"}],"kev":null,"metrics":[],"modifiedAt":1793772024018,"publishedAt":1793772024018,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/e9d5db8d-5eac-404e-ac29-847689af0d53/"}],"remediation":[],"revision":"9a6eaa53cf1a63bbee3a97b4cb51608cb914391a34e72944c661b6c6f8f99c20","sources":[{"modifiedAt":1793772024018,"name":"CNA: WPScan","retrievedAt":1793776112279,"url":"https://www.cve.org/CVERecord?id=CVE-2026-105191"}],"ssvc":null,"status":"published","title":"WP ERP < 1.17.11 - Subscriber+ Sensitive Data Disclosure via Audit Log","updatedAt":1793776112279}