Skip to content
OpenAdvisories

Vendor

projectopia

6 known vulnerabilities.

Products

Projectopia 4 Projectopia – Project Management Tool 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-12876

    Projectopia – WordPress Project Management <= 5.1.19 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion

    The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pto_delete_file AJAX action in all versions up to, and including, 5.1.19. This makes it possible fo…

    projectopia Projectopia – Project Management Tool Web / CMS
  • Medium 6.5
    CVE-2025-48257

    WordPress Projectopia plugin <= 5.1.17 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Projectopia Projectopia projectopia-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Projectopia: from n/a through <= 5.1.17.

    projectopia Projectopia