CVE-2024-6536

説明 このスクリプトは CVE-2024-6536 の PoC です。Wordpress 用 Zephyr Project Manager プラグインで XSS が可能です。認証とプロジェクトマネージャ管理者権限が必要です。 使い方 root@kitploit: python3 CVE-2024-6536.py -u -p -w 例: python3 CVE-2024-6536.py -u user -p user -w http://localhost/wordpress リンク...

RISE-Ultimate_Project_Manager_e_CRM

CVE-2025-3855 - RISE Ultimate Project Manager - IDOR Sicherheitslücke: IDOR Insecure Direct Object Reference Betroffene Komponente: Profilbild-Upload-Endpunkt, teammembers-Controller Software: RISE - Ultimate Project Manager & CRM Anbieter: codecanyon Version: 3.8.2 CVE ORG :...

CVE-2026-26211

CVE-2026-26211 — XSS persistente in Ekushey Project Manager CRM Prodotto: Ekushey Project Manager CRM Versione: 5.0 Vulnerabilità: Cross-Site Scripting XSS persistente CWE: CWE-79 CVE: CVE-2026-26211 Ricercatore: LINDAN TRI SAPUTRA Segnalazione iniziale: 1 agosto 2026 Sommario È stata identificat...

WordPress Project Manager plugin 2.1.0-4.0.6 - Unauthenticated Subscriber Account Creation vulnerability

Unauthenticated Subscriber Account Creation vulnerability discovered by Usama Arshad in WordPress Plugin WP Project Manager versions 2.1.0-4.0.6...

CVE-2026-74930

The Project Manager WordPress plugin before 4.0.7 does not check that the user whose activity is being requested is the one making the request in one of its REST API routes, allowing any authenticated user, such as a subscriber, to read any other user's activity history along with their email...

CVE-2026-74929

The Project Manager WordPress plugin before 4.0.7 does not restrict several of its REST API routes to the projects a user belongs to, allowing any authenticated user, such as a subscriber, to read other projects' task content and user email addresses and to modify other projects' task boards...

CVE-2026-74928

The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing unauthenticated users to create WordPress accounts with a password the attacker already knows, bypassing the site's own registration setting...

EUVD-2026-66279

The Project Manager WordPress plugin before 4.0.7 does not restrict several of its REST API routes to the projects a user belongs to, allowing any authenticated user, such as a subscriber, to read other projects' task content and user email addresses and to modify other projects' task boards...

EUVD-2026-66280

The Project Manager WordPress plugin before 4.0.7 does not check that the user whose activity is being requested is the one making the request in one of its REST API routes, allowing any authenticated user, such as a subscriber, to read any other user's activity history along with their email...

CVE-2026-74930 WP Project Manager 2.2.0 - 4.0.6 - Subscriber+ User Activity Feed Disclosure via IDOR

The Project Manager WordPress plugin before 4.0.7 does not check that the user whose activity is being requested is the one making the request in one of its REST API routes, allowing any authenticated user, such as a subscriber, to read any other user's activity history along with their email...

CVE-2026-74928

The WP Project Manager WordPress plugin (versions 2.1.0–4.0.6 ) lacks an authorization check on its Trello import routes , allowing unauthenticated users to create WordPress accounts with a password the attacker already knows , effectively bypassing the site's registration setting. This was disco...

EUVD-2026-66278

The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing unauthenticated users to create WordPress accounts with a password the attacker already knows, bypassing the site's own registration setting...

CVE-2026-74928 WP Project Manager 2.1.0 - 4.0.6 - Unauthenticated Subscriber Account Creation via Trello Import Routes

The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing unauthenticated users to create WordPress accounts with a password the attacker already knows, bypassing the site's own registration setting...

WordPress Project Manager plugin < 4.0.7 - Subscriber+ Cross-Project Task Disclosure and Task Board Modification vulnerability

Subscriber+ Cross-Project Task Disclosure and Task Board Modification vulnerability discovered by Pedro Pinho in WordPress Plugin WP Project Manager versions 4.0.7...

WordPress Project Manager plugin 2.2.0-4.0.7 - 4.0.6 - Subscriber+ User Activity Feed Disclosure vulnerability

WordPress Project Manager plugin 2.2.0-4.0.7 - 4.0.6 - Subscriber+ User Activity Feed Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin WP Project Manager versions 2.2.0-4.0.6...

CVE-2026-74929 WP Project Manager < 4.0.7 - Subscriber+ Cross-Project Task Disclosure and Task Board Modification via IDOR

The Project Manager WordPress plugin before 4.0.7 does not restrict several of its REST API routes to the projects a user belongs to, allowing any authenticated user, such as a subscriber, to read other projects' task content and user email addresses and to modify other projects' task boards...

CVE-2026-74930

The WordPress Project Manager plugin (versions 2.2.0–4.0.6 ) contains an IDOR flaw in one of its REST API routes: it fails to verify that the user whose activity feed is being requested is the same user making the request. As a result, any authenticated user at subscriber level or above can read ...

CVE-2026-74929

The WP Project Manager WordPress plugin (by WEDevs) prior to 4.0.7 suffers from an IDOR (Insecure Direct Object Reference) flaw in several of its REST API routes . Because these routes are not properly scoped to the projects a user belongs to, any authenticated user with at least Subscriber role ...

EUVD-2026-65620

Ekushey Project Manager CRM stores the administrator-configured system name and writes it to the login page without output encoding. The value is emitted in three places on that page: the content attribute of the description meta element, the title element, and the text of an h4 element in the pa...

CVE-2026-26211

Ekushey Project Manager CRM 5.0 is affected by a stored XSS vulnerability in the administrator-configured system name field. The value is written to the login page without output encoding, and its occurrence in an h4 element is parsed as markup, causing any injected HTML event handlers to execute...