WeDevs Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker

• CVE-2026-116512 Critical 9.8 Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection 0.6%
• CVE-2025-8994 Medium 6.5 WP Project Manager <= 2.6.26 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator' 0.3%
• CVE-2025-2541 Medium 6.4 WP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
• CVE-2025-3100 Medium 6.4 WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload 0.3%
• CVE-2024-13500 Medium 6.5 WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter 0.4%
• CVE-2024-13752 Medium 6.5 WP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update 0.5%
• CVE-2024-12195 Medium 6.5 WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL Injection 0.4%
• CVE-2024-10548 Medium 6.5 WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API 0.4%
• CVE-2024-10520 Medium 5.3 WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion 0.3%
• CVE-2024-10174 High 7.3 WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.13 - Insecure Direct Object Reference to Unauthenticated Authorization Bypass 0.7%
• CVE-2023-3636 High 8.8 WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation 0.9%
• CVE-2020-36745 Medium 4.3 WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass 0.4%