Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker

Güvenlik açıkları

• CVE-2026-78262kimlik doğrulamasız≤ 4.0.6

  WordPress WP Project Manager plugin <= 4.0.6 - PHP Object Injection vulnerability

  Kritik 9.8

• CVE-2023-40003kimlik doğrulamasız≤ 2.6.7

  WordPress WP Project Manager plugin <= 2.6.7 - Broken Access Control vulnerability

  Kritik 9.8

• CVE-2023-34383giriş gerekir≤ 2.6.0

  WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection

  Kritik 9.8

• CVE-2025-32280kimlik doğrulamasız · tıklama gerekir≤ 2.6.25

  WordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) Vulnerability

  Yüksek 8.8

• CVE-2020-36745kimlik doğrulamasız · tıklama gerekir→ 2.4.1

  WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass

  Yüksek 8.8

• CVE-2023-3636abone+≤ 2.6.4

  WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation

  Yüksek 8.8

• CVE-2024-10174kimlik doğrulamasız≤ 2.6.13

  WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.13 - Insecure Direct Object Reference to Unauthent

  Yüksek 7.3

• CVE-2025-68040giriş gerekir≤ 3.0.1

  WordPress WP Project Manager plugin <= 3.0.1 - Sensitive Data Exposure vulnerability

  Orta 6.5

• CVE-2025-8994abone+≤ 2.6.26

  WP Project Manager <= 2.6.26 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator'

  Orta 6.5

• CVE-2024-13500abone+≤ 2.6.17

  WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter

  Orta 6.5

• CVE-2024-13752abone+≤ 2.6.17

  WP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update

  Orta 6.5

• CVE-2024-12195abone+≤ 2.6.16

  WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL Injection

  Orta 6.5

• CVE-2024-10548abone+≤ 2.6.15

  WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API

  Orta 6.5

• CVE-2026-97281abone+≤ 4.0.7

  WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability

  Orta 6.3

• CVE-2025-3100abone+≤ 2.6.22

  WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site

  Orta 5.4

• CVE-2023-49860giriş gerekir≤ 2.6.7

  WordPress WP Project Manager Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2021-36826abone+≤ 2.4.13

  WordPress WP Project Manager plugin <= 2.4.13 - Stored Cross-Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2025-2541yazar+≤ 2.6.22

  WP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  Orta 5.4

• CVE-2025-58269kimlik doğrulamasız≤ 2.6.25

  WordPress WP Project Manager Plugin <= 2.6.25 - Sensitive Data Exposure Vulnerability

  Orta 5.3

• CVE-2024-10520kimlik doğrulamasız≤ 2.6.14

  WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion

  Orta 5.3

• CVE-2025-22649yüksek yetki≤ 2.6.22

  WordPress WP Project Manager plugin <= 2.6.22 - Cross Site Scripting (XSS) vulnerability

  Orta 4.8