Project Manager (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-26. Vendor: Unknown.

CVEs of Project Manager

• CVE-2026-74930 - CVSS 4.3 (medium), 2026-08-26: The Project Manager WordPress plugin before 4.0.7 does not check that the user whose activity is being requested is the one making the request in one of its…
• CVE-2026-74929 - CVSS 5.4 (medium), 2026-08-26: The Project Manager WordPress plugin before 4.0.7 does not restrict several of its REST API routes to the projects a user belongs to, allowing any…
• CVE-2026-74928 - CVSS 7.5 (high), 2026-08-26: The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing unauthenticated users to create…