7.7
Élevée
CVE-2024-12015 The 'Project Manager' WordPress Plugin is affected by an authenticated SQL injection vulnerability in the 'orderby'…
Description
The 'Project Manager' WordPress Plugin is affected by an authenticated SQL injection vulnerability in the 'orderby' parameter in the '/pm/v2/activites' route.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Project Manager | 0 | Pas de correctif indiqué |
| wp_project_manager | Versions non publiées |
Autres CVE de WP Project Manager
Les 9 CVE de WP Project Manager →
CVE-2026-97281
Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions
6.3
Moyenne
CVE-2026-78262
Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions
9.8
Critique
CVE-2025-68040
WordPress WP Project Manager plugin <= 3.0.1 - Sensitive Data Exposure vulnerability
6.5
Moyenne
CVE-2025-58269
Use of Hard-coded Credentials vulnerability in weDevs WP Project Manager wedevs-project-manager allows Retrieve Embedded…
5.3
Moyenne