Skip to content
OpenAdvisories

Vendor

Worklenz

4 known vulnerabilities.

Products

worklenz 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-85388

    Worklenz through 3.0.0 SQL Injection via the sort-field Query Parameter

    Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowing authenticated users to inject arbitrary PostgreSQL expressions into ORDER BY clauses. Attackers can use time-based and boolean-based blin…

    Worklenz worklenz
  • High 8.8
    CVE-2026-25947

    Worklenz Boolean-Based Blind SQL Injection via Improper ORDER BY Clause Input Validation

    Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affecting project and task management controllers, reporting and financial data endpoints, real-time sock…

    Worklenz worklenz