Lucene search
+L

619 matches found

CVE
CVE
added 2026/08/25 5:28 p.m.13 views

CVE-2026-26211

Ekushey Project Manager CRM 5.0 is affected by a stored XSS vulnerability in the administrator-configured system name field. The value is written to the login page without output encoding, and its occurrence in an h4 element is parsed as markup, causing any injected HTML event handlers to execute...

4.8CVSS5.3AI score0.00306EPSS
SaveExploits1References3
NVD
NVD
added 2026/08/25 6:19 a.m.9 views

CVE-2026-78470

The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers,...

6.5CVSS0.00228EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/25 5:31 a.m.37 views

CVE-2026-78470 WP Project Manager Pro <= 4.0.1 - Authenticated (Subscriber+) SQL Injection

The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers,...

6.5CVSS0.00228EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/25 5:31 a.m.14 views

CVE-2026-78470

WP Project Manager Pro is a WordPress plugin vulnerable to SQL Injection in all versions up to and including 4.0.1 . The root cause is insufficient escaping on a user-supplied parameter combined with a lack of prepared statements in the existing SQL query. An authenticated attacker with Subscribe...

6.5CVSS6AI score0.00228EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 5:31 a.m.7 views

EUVD-2026-65299

The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers,...

6.5CVSS6AI score0.00228EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 12:30 a.m.9 views

EUVD-2026-65169

Unauthenticated PHP Object Injection in WP Project Manager = 4.0.6 versions...

9.8CVSS5.4AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.18 views

PT-2026-81176

Name of the Vulnerable Software and Affected Versions WP Project Manager Pro versions prior to 4.0.2 Description Insufficient escaping of user-supplied parameters and lack of proper preparation in SQL queries allow authenticated attackers with Subscriber-level access and above to perform SQL...

6.5CVSS5.5AI score0.00228EPSS
SaveExploits0References6
Packet Storm
Packet Storm
added 2026/08/25 12:00 a.m.19 views

Ekushey Project Manager CRM 5.0 Cross Site Scripting

A persistent cross site scripting vulnerability was identified in Ekushey Project Manager CRM version 5.0. The issue was found in the application settings, specifically the Name field. CVE-2026-26211 — Stored XSS in Ekushey Project Manager CRM Product: Ekushey Project Manager CRM Version: 5.0...

4.8CVSS4.9AI score0.00306EPSS
SaveExploits1
NVD
NVD
added 2026/08/24 10:17 p.m.17 views

CVE-2026-78262

Unauthenticated PHP Object Injection in WP Project Manager = 4.0.6 versions...

9.8CVSS0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/24 9:31 p.m.35 views

CVE-2026-78262

WP Project Manager (WordPress plugin by WeDevs ) is affected by an unauthenticated PHP Object Injection vulnerability in versions ≤ 4.0.6 . The flaw allows a remote, unauthenticated attacker over the network with low complexity and no user interaction to achieve high impact on confidentiality, in...

9.8CVSS5.3AI score0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 9:31 p.m.36 views

CVE-2026-78262 WordPress WP Project Manager plugin <= 4.0.6 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in WP Project Manager = 4.0.6 versions...

9.8CVSS0.00331EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/08/24 1:23 p.m.5 views

WordPress WP Project Manager plugin <= 4.0.6 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by 20kilograma in WordPress Plugin WP Project Manager versions = 4.0.6...

9.8CVSS5.4AI score0.00331EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/08/24 12:16 p.m.13 views

CVE-2026-32478

Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...

8.5CVSS0.00278EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 11:54 a.m.52 views

CVE-2026-32478 WordPress WP Project Manager Pro plugin <= 4.0.1 - SQL Injection vulnerability

Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...

8.5CVSS0.00278EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/24 11:54 a.m.15 views

EUVD-2026-64802

Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...

8.5CVSS5.8AI score0.00278EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/24 11:54 a.m.18 views

CVE-2026-32478

CVE-2026-32478 is a Subscriber-level SQL Injection vulnerability in the WP Project Manager Pro WordPress plugin (versions ≤ 4.0.1 ), discovered by researcher dutafi . The flaw allows a user with the low-privilege Subscriber role to execute arbitrary SQL queries, resulting in high confidentiality ...

8.5CVSS5.8AI score0.00278EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/08/21 7:10 a.m.10 views

WordPress WP Project Manager Pro plugin <= 4.0.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dutafi in WordPress Plugin WP Project Manager Pro versions = 4.0.1...

8.5CVSS6AI score0.00278EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-34398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project...

7.8CVSS6.3AI score0.00151EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/18 10:16 p.m.11 views

CVE-2026-50186

4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an authenticated project manager to supply traversal sequences in the filename parameter of GET /exports/:id/:filename. In server/api/controllers/boards/download.js, the decoded inputs.filename value is...

8.8CVSS0.00432EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/18 9:34 p.m.14 views

EUVD-2026-62202

4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an authenticated project manager to supply traversal sequences in the filename parameter of GET /exports/:id/:filename. In server/api/controllers/boards/download.js, the decoded inputs.filename value is...

8.8CVSS5.5AI score0.00432EPSS
SaveExploits0References3
Rows per page
Query Builder