7.7
High
CVE-2024-12015 The 'Project Manager' WordPress Plugin is affected by an authenticated SQL injection vulnerability in the 'orderby'…
Description
The 'Project Manager' WordPress Plugin is affected by an authenticated SQL injection vulnerability in the 'orderby' parameter in the '/pm/v2/activites' route.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Project Manager | 0 | No fix stated |
| wp_project_manager | Versions not published |
Other CVEs of WP Project Manager
The 9 CVEs of WP Project Manager →
CVE-2026-97281
Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions
6.3
Medium
CVE-2026-78262
Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions
9.8
Critical
CVE-2025-68040
Insertion of Sensitive Information Into Sent Data vulnerability in weDevs WP Project Manager wedevs-project-manager…
6.5
Medium
CVE-2025-58269
Use of Hard-coded Credentials vulnerability in weDevs WP Project Manager wedevs-project-manager allows Retrieve Embedded…
5.3
Medium