Skip to content

Known vulnerabilities in wedevs WP Project Manager

Is your version affected?

CVE Summary Score Published
CVE-2026-97281 Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions 6.3 Medium Oct 1, 2026
CVE-2026-78262 Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions 9.8 Critical Aug 24, 2026
CVE-2025-68040 Insertion of Sensitive Information Into Sent Data vulnerability in weDevs WP Project Manager wedevs-project-manager… 6.5 Medium Dec 29, 2025
CVE-2025-58269 Use of Hard-coded Credentials vulnerability in weDevs WP Project Manager wedevs-project-manager allows Retrieve Embedded… 5.3 Medium Sep 22, 2025
CVE-2025-32280 Cross-Site Request Forgery (CSRF) vulnerability in weDevs WP Project Manager wedevs-project-manager allows Cross Site… 4.3 Medium Apr 4, 2025
CVE-2025-22649 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP… 5.9 Medium Mar 27, 2025
CVE-2023-40003 Missing Authorization vulnerability in weDevs WP Project Manager wedevs-project-manager allows Exploiting Incorrectly… 6.5 Medium Dec 13, 2024
CVE-2024-12015 The 'Project Manager' WordPress Plugin is affected by an authenticated SQL injection vulnerability in the 'orderby'… 7.7 High Dec 2, 2024
CVE-2023-34383 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP… 8.5 High Nov 3, 2023

Other wedevs products