Lucene search
K

50 matches found

Positive Technologies
Positive Technologies
added 2025/05/19 12:0 a.m.4 views

PT-2025-21969 · Unknown · Projectopia

Name of the Vulnerable Software and Affected Versions: Projectopia versions through 5.1.17 Description: The issue is related to Missing Authorization, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions through 5.1.17, update to a...

6.5CVSS6.3AI score0.00226EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/05/19 12:0 a.m.1 views

WordPress plugin Projectopia 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.5CVSS6.4AI score0.00226EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/03 4:58 a.m.16 views

CVE-2025-3952

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'ptoremovelogo' function in all versions up to, and including, 5.1.16. This makes it possible for...

8.1CVSS6.6AI score0.00214EPSS
Exploits0References1
OSV
OSV
added 2025/05/01 5:15 a.m.0 views

CVE-2025-3952

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'ptoremovelogo' function in all versions up to, and including, 5.1.16. This makes it possible for...

8.1CVSS5.7AI score
Exploits0References3
NVD
NVD
added 2025/05/01 5:15 a.m.7 views

CVE-2025-3952

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'ptoremovelogo' function in all versions up to, and including, 5.1.16. This makes it possible for...

8.1CVSS0.00214EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/05/01 4:22 a.m.16 views

CVE-2025-3952 Projectopia &#8211; WordPress Project Management <= 5.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'ptoremovelogo' function in all versions up to, and including, 5.1.16. This makes it possible for...

8.1CVSS0.00214EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/05/01 4:22 a.m.4 views

CVE-2025-3952 Projectopia &#8211; WordPress Project Management <= 5.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'ptoremovelogo' function in all versions up to, and including, 5.1.16. This makes it possible for...

8.1CVSS7.7AI score0.00214EPSS
Exploits0References3
CVE
CVE
added 2025/05/01 4:22 a.m.61 views

CVE-2025-3952

CVE-2025-3952: Projectopia – WordPress Project Management plugin (versions

8.1CVSS6.6AI score0.00214EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2025/05/01 12:0 a.m.1 views

WordPress plugin Projectopia 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS8AI score0.00214EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/05/01 12:0 a.m.2 views

PT-2025-18358 · WordPress · Projectopia

Name of the Vulnerable Software and Affected Versions: The Projectopia – WordPress Project Management plugin for WordPress versions up to, and including, 5.1.16 Description: The issue allows unauthorized modification of data, potentially leading to a denial of service. This is due to a missing...

8.1CVSS8.3AI score0.00214EPSS
Exploits0References12
Patchstack
Patchstack
added 2025/04/30 8:17 p.m.2 views

WordPress Projectopia plugin <= 5.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Option Deletion vulnerability discovered by Chuck in WordPress Plugin Projectopia versions = 5.1.16...

8.1CVSS8.8AI score0.00214EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/25 5:4 p.m.17 views

CVE-2025-32648

Incorrect Privilege Assignment vulnerability in Projectopia Projectopia projectopia-core allows Privilege Escalation.This issue affects Projectopia: from n/a through = 5.1.24...

9.8CVSS7.2AI score0.00611EPSS
Exploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.5 views

CVE-2025-32648

Incorrect Privilege Assignment vulnerability in Projectopia Projectopia projectopia-core allows Privilege Escalation.This issue affects Projectopia: from n/a through = 5.1.24...

9.8CVSS0.00611EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:47 p.m.6 views

CVE-2025-32648 WordPress Projectopia plugin <= 5.1.24 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Projectopia Projectopia projectopia-core allows Privilege Escalation.This issue affects Projectopia: from n/a through = 5.1.24...

9.8CVSS8.6AI score0.00611EPSS
Exploits0References1
CVE
CVE
added 2025/04/17 3:47 p.m.49 views

CVE-2025-32648

CVE-2025-32648 : In Projectopia (WordPress Project Management), an "Incorrect Privilege Assignment" vulnerability enables Privilege Escalation in versions up to 5.1.16 (affected). Exploitation context/impact (per sources) indicates a Total impact with critical severity (CVSS 3.1: AV:N/AC:L/PR:N/U...

9.8CVSS7.2AI score0.00611EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/17 3:47 p.m.11 views

CVE-2025-32648 WordPress Projectopia plugin <= 5.1.24 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Projectopia Projectopia projectopia-core allows Privilege Escalation.This issue affects Projectopia: from n/a through = 5.1.24...

9.8CVSS0.00611EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.2 views

PT-2025-17155 · Unknown · Projectopia

Name of the Vulnerable Software and Affected Versions: Projectopia versions through 5.1.16 Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in Projectopia. Recommendations: For versions through 5.1.16, update to a version late...

9.8CVSS9.2AI score0.00611EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.1 views

WordPress plugin Projectopia 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.8CVSS8.6AI score0.00611EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/04/14 1:30 p.m.4 views

WordPress Projectopia plugin <= 5.1.23 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Martino Spagnuolo r3verii in WordPress Plugin Projectopia versions = 5.1.23...

9.8CVSS8.6AI score0.00611EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 4:10 a.m.3 views

CVE-2024-54336

Authentication Bypass Using an Alternate Path or Channel vulnerability in Projectopia Projectopia projectopia-core allows Authentication Bypass.This issue affects Projectopia: from n/a through = 5.1.7...

8.8CVSS7.2AI score0.002EPSS
Exploits0References1
Rows per page
Query Builder