Skip to content
Wedevs Wp Project Manager vulnerabilities
-
wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 more
WP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2025-2541
6.4 Medium
-
wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 more
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
CVE-2025-3100
6.4 Medium
-
wedevs wp project manager
WordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-32280
4.3 Medium
-
wedevs wp project manager
WordPress WP Project Manager plugin <= 2.6.22 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22649
5.9 Medium
-
wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 more
WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter
CVE-2024-13500
6.5 Medium
-
wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 more
WP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
CVE-2024-13752
6.5 Medium
-
wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 more
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL Injection
CVE-2024-12195
6.5 Medium
-
wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 more
WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API
CVE-2024-10548
6.5 Medium
-
wedevs wp project manager
WordPress WP Project Manager plugin <= 2.6.7 - Broken Access Control vulnerability
CVE-2023-40003
6.5 Medium
-
wedevs wp project manager
SQL Injection in WordPress Project Manager Plugin
CVE-2024-12015
7.7 High
-
wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker, wp project manager task team and project management plugin featuring kanban board and gantt charts +2 more
WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion
CVE-2024-10520
5.3 Medium
-
wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 more
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.13 - Insecure Direct Object Reference to Unauthenticated Authorization Bypass
CVE-2024-10174
7.3 High
-
wedevs wp project manager – task, team, and project management plugin featuring kanban board and gantt charts, wp project manager +1 more
WordPress WP Project Manager Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-49860
6.5 Medium
-
wedevs wp project manager
WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection
CVE-2023-34383
8.5 High
-
wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 more
WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
CVE-2023-3636
8.8 High
-
wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 more
WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass
CVE-2020-36745
4.3 Medium
-
wedevs wp project manager, wp project manager (wordpress plugin) +1 more
WordPress WP Project Manager plugin <= 2.4.13 - Stored Cross-Site Scripting (XSS) vulnerability
CVE-2021-36826
5.4 Medium