The WP ERP plugin for WordPress, which helps with HR, recruitment, job listings, and WooCommerce CRM and accounting, has a security issue. This means that anyone who has an account with Subscriber-level access or higher can do something they are not supposed to be able to do.