PatchTheCVE: wp-pmanagerhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-2248: The WP-PManager WordPress plugin through 1.2 does not sanitize and escape a parameter before using it in a SQLhttps://patchthecve.com/cve/CVE-2025-2248.htmlhttps://patchthecve.com/cve/CVE-2025-2248.htmlWed, 17 Jun 2026 09:06:37 +0000MEDIUM 5.4: The WP-PManager WordPress plugin through 1.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacksCVE-2025-2247: The WP-PManager WordPress plugin through 1.2 does not have CSRF check in place when updating its settings, whihttps://patchthecve.com/cve/CVE-2025-2247.htmlhttps://patchthecve.com/cve/CVE-2025-2247.htmlWed, 17 Jun 2026 09:06:37 +0000MEDIUM 5.4: The WP-PManager WordPress plugin through 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attackCVE-2024-13875: The WP-PManager WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it bachttps://patchthecve.com/cve/CVE-2024-13875.htmlhttps://patchthecve.com/cve/CVE-2024-13875.htmlWed, 17 Jun 2026 07:02:54 +0000HIGH 7.1: The WP-PManager WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.