Skip to content
OpenAdvisories

Product · wedevs

WP Project Manager

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2024-12015

    SQL Injection in WordPress Project Manager Plugin

    The 'Project Manager' WordPress Plugin is affected by an authenticated SQL injection vulnerability in the 'orderby' parameter in the '/pm/v2/activites' route.

    wedevs WP Project Manager Web / CMS
  • High 8.5
    CVE-2023-34383

    WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP Project Manager wedevs-project-manager allows SQL Injection.This issue affects WP Project Manager: from n/a through 2.6.0.

    wedevs WP Project Manager