7.7
Élevée
CVE-2024-12015 The 'Project Manager' WordPress Plugin is affected by an authenticated SQL injection vulnerability in the 'orderby'…
Description
The 'Project Manager' WordPress Plugin is affected by an authenticated SQL injection vulnerability in the 'orderby' parameter in the '/pm/v2/activites' route.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Project Manager | 0 | Pas de correctif indiqué |
| wp_project_manager | Versions non publiées |
Autres CVE de WP Project Manager
Les 9 CVE de WP Project Manager →
CVE-2026-97281
Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions
6.3
Moyenne
CVE-2026-78262
Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions
9.8
Critique
CVE-2025-68040
Insertion of Sensitive Information Into Sent Data vulnerability in weDevs WP Project Manager wedevs-project-manager…
6.5
Moyenne
CVE-2025-58269
Use of Hard-coded Credentials vulnerability in weDevs WP Project Manager wedevs-project-manager allows Retrieve Embedded…
5.3
Moyenne