8.5
High
CVE-2023-34383 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP Project Manager wedevs-project-manager allows SQL Injection.This issue affects WP Project Manager: from n/a through 2.6.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Project Manager 2.6 | earliest → 2.6.0 | No fix stated |
| wp_project_manager 2.6 | earliest → 2.6.0 | No fix stated |
Other CVEs of WP Project Manager
The 9 CVEs of WP Project Manager →
CVE-2026-97281
Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions
6.3
Medium
CVE-2026-78262
Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions
9.8
Critical
CVE-2025-68040
Insertion of Sensitive Information Into Sent Data vulnerability in weDevs WP Project Manager wedevs-project-manager…
6.5
Medium
CVE-2025-58269
Use of Hard-coded Credentials vulnerability in weDevs WP Project Manager wedevs-project-manager allows Retrieve Embedded…
5.3
Medium