Skip to content
OpenAdvisories

Product · wedevs

WP Project Manager

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-97281

    WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability

    Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions.

    wedevs WP Project Manager
  • Medium 6.5
    CVE-2025-68040

    WordPress WP Project Manager plugin <= 3.0.1 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in weDevs WP Project Manager wedevs-project-manager allows Retrieve Embedded Sensitive Data.This issue affects WP Project Manager: from n/a through 3.0.1.

    wedevs WP Project Manager
  • Medium 5.3
    CVE-2025-58269

    WordPress WP Project Manager Plugin <= 2.6.25 - Sensitive Data Exposure Vulnerability

    Use of Hard-coded Credentials vulnerability in weDevs WP Project Manager wedevs-project-manager allows Retrieve Embedded Sensitive Data.This issue affects WP Project Manager: from n/a through <= 2.6.25.

    wedevs WP Project Manager
  • Medium 4.3
    CVE-2025-32280

    WordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in weDevs WP Project Manager wedevs-project-manager allows Cross Site Request Forgery.This issue affects WP Project Manager: from n/a through < 2.6.25.

    wedevs WP Project Manager
  • Medium 5.9
    CVE-2025-22649

    WordPress WP Project Manager plugin <= 2.6.22 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP Project Manager wedevs-project-manager allows Stored XSS.This issue affects WP Project Manager: from n/a through <= 2.6.22.

    wedevs WP Project Manager
  • Medium 6.5
    CVE-2023-40003

    WordPress WP Project Manager plugin <= 2.6.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in weDevs WP Project Manager wedevs-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Project Manager: from n/a through <= 2.6.7.

    wedevs WP Project Manager