CVE-2026-116512

The Project Manager WordPress plugin (all versions up to and including 4.1.1 ) is vulnerable to Remote Code Execution (RCE) via the 'id' parameter . The root cause is the direct concatenation of an unsanitized 'id' parameter into a pipe-delimited validation rule string. This string is subsequentl...