Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-68040 EUVD-2025-205670GHSA-863c-m9f2-hgxh

WordPress WP Project Manager plugin <= 3.0.1 - Sensitive Data Exposure vulnerability

Published Dec 29, 2025 · Updated Nov 8, 2026 · Assigned by Patchstack

Description

Insertion of Sensitive Information Into Sent Data vulnerability in weDevs WP Project Manager wedevs-project-manager allows Retrieve Embedded Sensitive Data.This issue affects WP Project Manager: from n/a through 3.0.1.

Affected products

VendorProductAffectedFixed
weDevs WP Project Manager ≤ 3.0.1 —

References