Skip to content
OpenAdvisories

Product · projectopia

Projectopia – Project Management Tool

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Projectopia – WordPress Project Management <= 5.1.19 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion

    The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pto_delete_file AJAX action in all versions up to, and including, 5.1.19. This makes it possible fo…