Skip to contentWedevs Project Manager – Ai Powered Project Management, Task Management, Kanban Board & Time Tracker vulnerabilities
- wedevs project manager – ai powered project management, task management, kanban board & time trackerProject Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function InjectionCVE-2026-116512Public exploit9.8 Critical
- wedevs project manager – ai powered project management, task management, kanban board & time trackerWP Project Manager <= 2.6.26 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator'CVE-2025-89946.5 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2025-25416.4 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File UploadCVE-2025-31006.4 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby ParameterCVE-2024-135006.5 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options UpdateCVE-2024-137526.5 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL InjectionCVE-2024-121956.5 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST APICVE-2024-105486.5 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker, wp project manager task team and project management plugin featuring kanban board and gantt charts +2 moreWP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/DeletionCVE-2024-105205.3 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.13 - Insecure Direct Object Reference to Unauthenticated Authorization BypassCVE-2024-101747.3 High
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege EscalationCVE-2023-36368.8 High
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager <= 2.4.0 - Cross-Site Request Forgery BypassCVE-2020-367454.3 Medium