Login Request a demo
WP
Product
WP Project Manager
by weDevs · last CVE Oct 1, 2026
21
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 3High 5Medium 13Low 0
Severity
All severities21Critical3High5Medium13Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Project Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-68040
6.5
0%
Dec 29
WordPress WP Project Manager plugin <= 3.0.1 - Sensitive Data Exposure vulnerability
Affected: through 3.0.1
CVE-2024-13500
6.5
0%
Feb 15
WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter
Affected: before 2.6.18
CVE-2024-13752
6.5
1%
Feb 15
WP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
Affected: before 2.6.18
CVE-2024-12195
6.5
0%
Jan 4
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL Injection
Affected: before 2.6.17
CVE-2024-10548
6.5
0%
Dec 19
WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API
Affected: before 2.6.16
CVE-2026-97281
6.3
0%
Oct 1
WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability
Affected: through 4.0.7
CVE-2025-2541
5.4
0%
Apr 11
WP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Affected: before 2.6.23
CVE-2025-3100
5.4
0%
Apr 9
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
Affected: before 2.6.23
CVE-2023-49860
5.4
0%
Dec 14
WordPress WP Project Manager Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)
Affected: through 2.6.7
CVE-2021-36826
5.4
1%
Apr 4
Authenticated (subscriber or higher user role if allowed to access projects) Stored Cross-Site Scripting (XSS) vulnerability in weDevs WP Project Manager plugin <= 2.4.13 versions
Affected: before 2.4.14
CVE-2025-58269
5.3
0%
Sep 22
WordPress WP Project Manager Plugin <= 2.6.25 - Sensitive Data Exposure Vulnerability
Affected: through 2.6.25
CVE-2024-10520
5.3
0%
Nov 20
WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion
Affected: before 2.6.15
CVE-2025-22649
4.8
0%
Mar 27
WordPress WP Project Manager plugin <= 2.6.22 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.6.22
Showing 13