Threats affecting pkg:github/ERP

CVE-2026-126808 is an authorization vulnerability in weDevs ERP (WP ERP) versions up to 1.17.11. Authenticated employees can improperly edit their own HR records due to incorrect permission checks in HRM AJAX handlers. This flaw allows modification of sensitive job-related information such as designation, reporting manager, pay rate, employment type, and deletion of job history.