CVE-2026-12877

CVE-2026-12877 affects the WordPress plugin “Project Management, Bug and Issue Tracking Plugin” (versions before 5.1.0). The vulnerability stems from unsanitized/uncleaned user input used directly in a SQL query by the plugin, enabling an unauthenticated attacker to perform SQL injection via the ...