Lucene search
+L

55 matches found

Patchstack
Patchstack
added 2025/05/19 4:30 p.m.7 views

WordPress Projectopia plugin <= 5.1.17 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Projectopia versions = 5.1.17...

6.5CVSS6.7AI score0.00338EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/05/19 3:15 p.m.9 views

CVE-2025-48257

Missing Authorization vulnerability in Projectopia Projectopia projectopia-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Projectopia: from n/a through = 5.1.17...

6.5CVSS0.00338EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/19 2:45 p.m.25 views

CVE-2025-48257 WordPress Projectopia plugin <= 5.1.17 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Projectopia Projectopia projectopia-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Projectopia: from n/a through = 5.1.17...

6.5CVSS0.00338EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/19 2:45 p.m.7 views

CVE-2025-48257 WordPress Projectopia <= 5.1.17 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Projectopia Projectopia allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Projectopia: from n/a through 5.1.17...

6.5CVSS6.5AI score0.00338EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/19 2:45 p.m.28 views

CVE-2025-48257

CVE-2025-48257 (WordPress Projectopia

6.5CVSS5.9AI score0.00338EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/19 12:0 a.m.12 views

PT-2025-21969 · Unknown · Projectopia

Name of the Vulnerable Software and Affected Versions: Projectopia versions through 5.1.17 Description: The issue is related to Missing Authorization, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions through 5.1.17, update to a...

6.5CVSS6.3AI score0.00338EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/05/19 12:0 a.m.9 views

WordPress plugin Projectopia 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.5CVSS6.4AI score0.00338EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/03 4:58 a.m.28 views

CVE-2025-3952

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'ptoremovelogo' function in all versions up to, and including, 5.1.16. This makes it possible for...

8.1CVSS6.6AI score0.00412EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/01 5:15 a.m.11 views

CVE-2025-3952

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'ptoremovelogo' function in all versions up to, and including, 5.1.16. This makes it possible for...

8.1CVSS0.00412EPSS
SaveExploits0References3
OSV
OSV
added 2025/05/01 5:15 a.m.5 views

CVE-2025-3952

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'ptoremovelogo' function in all versions up to, and including, 5.1.16. This makes it possible for...

8.1CVSS5.7AI score0.00412EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/05/01 4:22 a.m.25 views

CVE-2025-3952 Projectopia &#8211; WordPress Project Management <= 5.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'ptoremovelogo' function in all versions up to, and including, 5.1.16. This makes it possible for...

8.1CVSS0.00412EPSS
SaveExploits0References3
CVE
CVE
added 2025/05/01 4:22 a.m.74 views

CVE-2025-3952

CVE-2025-3952: Projectopia – WordPress Project Management plugin (versions

8.1CVSS6.6AI score0.00412EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/01 4:22 a.m.5 views

CVE-2025-3952 Projectopia &#8211; WordPress Project Management <= 5.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'ptoremovelogo' function in all versions up to, and including, 5.1.16. This makes it possible for...

8.1CVSS7.7AI score0.00412EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/01 12:0 a.m.7 views

WordPress plugin Projectopia 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS8AI score0.00412EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/05/01 12:0 a.m.8 views

PT-2025-18358 · WordPress · Projectopia

Name of the Vulnerable Software and Affected Versions: The Projectopia – WordPress Project Management plugin for WordPress versions up to, and including, 5.1.16 Description: The issue allows unauthorized modification of data, potentially leading to a denial of service. This is due to a missing...

8.1CVSS8.3AI score0.00412EPSS
SaveExploits0References12
Patchstack
Patchstack
added 2025/04/30 8:17 p.m.7 views

WordPress Projectopia plugin <= 5.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Option Deletion vulnerability discovered by Chuck in WordPress Plugin Projectopia versions = 5.1.16...

8.1CVSS8.8AI score0.00412EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/25 5:4 p.m.35 views

CVE-2025-32648

Incorrect Privilege Assignment vulnerability in Projectopia Projectopia projectopia-core allows Privilege Escalation.This issue affects Projectopia: from n/a through = 5.1.24...

9.8CVSS7.2AI score0.00416EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.27 views

CVE-2025-32648

Incorrect Privilege Assignment vulnerability in Projectopia Projectopia projectopia-core allows Privilege Escalation.This issue affects Projectopia: from n/a through = 5.1.24...

9.8CVSS0.00416EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/17 3:47 p.m.61 views

CVE-2025-32648

CVE-2025-32648 : In Projectopia (WordPress Project Management), an "Incorrect Privilege Assignment" vulnerability enables Privilege Escalation in versions up to 5.1.16 (affected). Exploitation context/impact (per sources) indicates a Total impact with critical severity (CVSS 3.1: AV:N/AC:L/PR:N/U...

9.8CVSS7.2AI score0.00416EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:47 p.m.8 views

CVE-2025-32648 WordPress Projectopia plugin <= 5.1.24 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Projectopia Projectopia projectopia-core allows Privilege Escalation.This issue affects Projectopia: from n/a through = 5.1.24...

9.8CVSS8.6AI score0.00416EPSS
SaveExploits0References1
Rows per page
Query Builder