Product by weDevs

    Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker

    12 known vulnerabilities in Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker (weDevs), 0 of them actively exploited (CISA KEV).

    Key figures

    12

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker (weDevs)
    CriticalCVE-2026-116512

    Unrestricted Upload of File with Dangerous Type (CVE-2026-116512)

    		9.8
    HighCVE-2023-3636

    weDevs WP Project Manager: Improper Privilege Management

    also in 1 other product

    		8.8
    HighCVE-2024-10174

    weDevs WP Project Manager: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		7.3
    MediumCVE-2024-13752

    weDevs WP Project Manager: Missing Authorization

    also in 1 other product

    		6.5
    MediumCVE-2024-12195

    weDevs WP Project Manager: SQL Injection

    also in 1 other product

    		6.5
    MediumCVE-2024-13500

    WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter

    also in 1 other product

    		6.5
    MediumCVE-2024-10548

    weDevs WP Project Manager: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		6.5
    MediumCVE-2025-8994

    WP Project Manager <= 2.6.26 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator'

    		6.5
    MediumCVE-2025-2541

    weDevs WP Project Manager: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2025-3100

    weDevs WP Project Manager: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-10520

    WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion

    also in 1 other product

    		5.3
    HighCVE-2020-36745

    WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass

    also in 1 other product

    		4.3

    All products by weDevs