The WP ERP plugin is a tool for WordPress websites that has a security issue in versions up to 1.12.6. This issue makes it so that users with a certain level of access (subscriber-level access and above) can dismiss notifications intended for administrators without permission. This could allow these users to modify data without authorization.