Skip to content
OpenAdvisories

Vendor

projectopia

6 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.5

    WordPress Projectopia plugin <= 5.1.25.2 - Insecure Direct Object References (IDOR) vulnerability

    Custom role Insecure Direct Object References (IDOR) in Projectopia <= 5.1.25.2 versions.

  • High 8.1

    Projectopia &#8211; WordPress Project Management <= 5.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion

    The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'pto_remove_logo' function in all versions up to, and includin…

  • High 8.8

    WordPress Projectopia plugin <= 5.1.7 - Account Takeover vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Projectopia Projectopia projectopia-core allows Authentication Bypass.This issue affects Projectopia: from n/a through <= 5.1.7.