Vendor
projectopia
6 known vulnerabilities.
3 results · Clear filters · Feed
-
High 7.5
WordPress Projectopia plugin <= 5.1.25.2 - Insecure Direct Object References (IDOR) vulnerability
Custom role Insecure Direct Object References (IDOR) in Projectopia <= 5.1.25.2 versions.
-
High 8.1
Projectopia – WordPress Project Management <= 5.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion
The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'pto_remove_logo' function in all versions up to, and includin…
-
High 8.8
WordPress Projectopia plugin <= 5.1.7 - Account Takeover vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Projectopia Projectopia projectopia-core allows Authentication Bypass.This issue affects Projectopia: from n/a through <= 5.1.7.