8.5
Élevée
CVE-2023-34383 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP Project Manager wedevs-project-manager allows SQL Injection.This issue affects WP Project Manager: from n/a through 2.6.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Project Manager 2.6 | premières → 2.6.0 | Pas de correctif indiqué |
| wp_project_manager 2.6 | premières → 2.6.0 | Pas de correctif indiqué |
Autres CVE de WP Project Manager
Les 9 CVE de WP Project Manager →
CVE-2026-97281
Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions
6.3
Moyenne
CVE-2026-78262
Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions
9.8
Critique
CVE-2025-68040
Insertion of Sensitive Information Into Sent Data vulnerability in weDevs WP Project Manager wedevs-project-manager…
6.5
Moyenne
CVE-2025-58269
Use of Hard-coded Credentials vulnerability in weDevs WP Project Manager wedevs-project-manager allows Retrieve Embedded…
5.3
Moyenne