Product by weDevs

    weDevs WP Project Manager

    21 known vulnerabilities in weDevs WP Project Manager (weDevs), 0 of them actively exploited (CISA KEV).

    Key figures

    21

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in weDevs WP Project Manager (weDevs)
    CriticalCVE-2026-78262

    WordPress WP Project Manager plugin <= 4.0.6 - PHP Object Injection vulnerability

    		9.8
    HighCVE-2023-3636

    weDevs WP Project Manager: Improper Privilege Management

    also in 1 other product

    		8.8
    CriticalCVE-2023-34383

    WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection

    		8.5
    HighCVE-2024-10174

    weDevs WP Project Manager: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		7.3
    MediumCVE-2026-97281

    WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability

    		6.3
    HighCVE-2024-12015

    SQL Injection in WordPress Project Manager Plugin

    		7.7
    MediumCVE-2024-13752

    weDevs WP Project Manager: Missing Authorization

    also in 1 other product

    		6.5
    CriticalCVE-2023-40003

    WordPress WP Project Manager plugin <= 2.6.7 - Broken Access Control vulnerability

    		6.5
    MediumCVE-2024-12195

    weDevs WP Project Manager: SQL Injection

    also in 1 other product

    		6.5
    MediumCVE-2024-13500

    WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter

    also in 1 other product

    		6.5
    MediumCVE-2024-10548

    weDevs WP Project Manager: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		6.5
    MediumCVE-2025-68040

    WordPress WP Project Manager plugin <= 3.0.1 - Sensitive Data Exposure vulnerability

    		6.5
    MediumCVE-2021-36826

    WordPress WP Project Manager plugin <= 2.4.13 - Stored Cross-Site Scripting (XSS) vulnerability

    		5.4
    MediumCVE-2025-2541

    weDevs WP Project Manager: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-49860

    WordPress WP Project Manager Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)

    		6.5
    MediumCVE-2025-3100

    weDevs WP Project Manager: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2025-58269

    WordPress WP Project Manager Plugin <= 2.6.25 - Sensitive Data Exposure Vulnerability

    		5.3
    MediumCVE-2025-22649

    WordPress WP Project Manager plugin <= 2.6.22 - Cross Site Scripting (XSS) vulnerability

    		5.9
    MediumCVE-2024-10520

    WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion

    also in 1 other product

    		5.3
    HighCVE-2020-36745

    WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass

    also in 1 other product

    		4.3
    HighCVE-2025-32280

    WordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) Vulnerability

    		4.3

    All products by weDevs