Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2024-12015

SQL Injection in WordPress Project Manager Plugin

Description

The 'Project Manager' WordPress Plugin is affected by an authenticated SQL injection vulnerability in the 'orderby' parameter in the '/pm/v2/activites' route.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WeDevs WP Project Manager

Default version status: unaffected

  • 0affected

References