wedevs Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker
12 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-116512 | ≤ 4.1.1 | Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection | CRITICAL 9.8 | 0.6 % | ||
| CVE-2025-8994 | ≤ 2.6.26 | WP Project Manager <= 2.6.26 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator' | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-2541 | ≤ 2.6.22 | WP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload | MEDIUM 6.4 | 0.3 % | ||
| CVE-2025-3100 | ≤ 2.6.22 | WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscri… | MEDIUM 6.4 | 0.3 % | ||
| CVE-2024-13500 | ≤ 2.6.17 | WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-13752 | ≤ 2.6.17 | WP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-12195 | ≤ 2.6.16 | WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscri… | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-10548 | ≤ 2.6.15 | WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-10520 | ≤ 2.6.14 | WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion | MEDIUM 5.3 | 0.3 % | ||
| CVE-2024-10174 | ≤ 2.6.13 | WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.13 - Insecure Direct Object… | HIGH 7.3 | 0.7 % | ||
| CVE-2023-3636 | ≤ 2.6.4 | WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation | HIGH 8.8 | 0.9 % | ||
| CVE-2020-36745 | < 2.4.1 | WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass | HIGH 8.8 | 0.4 % |