Description
Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| weDevs | WP Project Manager | ≤ 4.0.6 | — |
Critical · 9.8
CVE-2026-78262
EUVD-2026-65169GHSA-xgwv-wp33-rjpx
WordPress WP Project Manager plugin <= 4.0.6 - PHP Object Injection vulnerability
Published Aug 24, 2026 · Updated Aug 27, 2026 · Assigned by Patchstack