PatchTheCVEwp project manager vulnerabilities and fixes
Recent CVEs affecting wp project manager, with upgrade or downgrade steps. 11 tracked.
Also searched as: wpprojectmanager.
wp project manager has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 11. Most recent: 2025-04-11. Highest priority: CVE-2024-10174 (score 43/100).
- CVE-2025-3100 MEDIUM 6.4 UPGRADE The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plu
- CVE-2025-32280 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in weDevs WP Project Manager wedevs-project-manager allows Cro
- CVE-2025-2541 MEDIUM 6.4 UPGRADE The WP Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads
- CVE-2025-22649 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs W
- CVE-2024-13752 MEDIUM 6.5 UPGRADE The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plu
- CVE-2024-13500 MEDIUM 6.5 UPGRADE The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plu
- CVE-2024-12195 MEDIUM 6.5 UPGRADE The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plu
- CVE-2024-10548 MEDIUM 6.5 UPGRADE The WP Project Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up
- CVE-2024-10520 MEDIUM 5.3 UPGRADE The WP Project Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missin
- CVE-2024-10174 HIGH 7.3 UPGRADE The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plu
- CVE-2023-40003 MEDIUM 6.5 UPGRADE Missing Authorization vulnerability in weDevs WP Project Manager wedevs-project-manager allows Exploiting Inco
FAQ
How do I fix wp project manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wp project manager being exploited right now?
None of the tracked wp project manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wp project manager CVE should I patch first?
CVE-2024-10174 currently ranks highest (43/100): The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plu.