High · 8.8 CVE-2024-54336 EUVD-2024-52459GHSA-h9xx-632f-3wf6

WordPress Projectopia plugin <= 5.1.7 - Account Takeover vulnerability

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: projectopia Product: Projectopia

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Projectopia Projectopia projectopia-core allows Authentication Bypass.This issue affects Projectopia: from n/a through <= 5.1.7.

Affected products

Vendor	Product	Affected	Fixed
Projectopia	Projectopia	≤ 5.1.7	—

References

https://patchstack.com/database/Wordpress/Plugin/projectopia-core/vulnerability/wordpress-projectopia-plugin-5-1-7-account-takeover-vulnerability?_s_id=cve vdb-entry