Skip to content
OpenAdvisories

Vendor

ov3rkll

2 known vulnerabilities.

Products

ProjectList 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-13376

    ProjectList <= 0.3.0 - Authenticated (Editor+) Arbitrary File Upload

    The ProjectList plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 0.3.0. This makes it possible for authenticated attackers, with Editor-level access and above, to upload arb…

    ov3rkll ProjectList Web / CMS