PatchTheCVEwedevs vulnerabilities
Recent CVEs affecting wedevs products. 23 tracked.
wedevs has 23 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 23. Most recent: 2025-05-15. Highest priority: CVE-2024-12812 (score 48/100).
- CVE-2025-47540 MEDIUM 5.3 UPGRADE Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs weMail wema
- CVE-2025-3100 MEDIUM 6.4 UPGRADE The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plu
- CVE-2025-32280 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in weDevs WP Project Manager wedevs-project-manager allows Cro
- CVE-2025-2541 MEDIUM 6.4 UPGRADE The WP Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads
- CVE-2025-22649 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs W
- CVE-2024-8801 MEDIUM 4.3 UPGRADE The Happy Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all ver
- CVE-2024-8739 MEDIUM 6.1 UPGRADE The ReCaptcha Integration for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting d
- CVE-2024-6666 HIGH 8.8 UPGRADE The WP ERP plugin for WordPress is vulnerable to SQL Injection via the ‘vendor_id’ and 'status' parameter in a
- CVE-2024-5790 MEDIUM 6.4 UPGRADE The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’
- CVE-2024-47640 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs W
- CVE-2024-43238 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs w
- CVE-2024-38693 HIGH 7.6 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs W
- CVE-2024-13752 MEDIUM 6.5 UPGRADE The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plu
- CVE-2024-13500 MEDIUM 6.5 UPGRADE The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plu
- CVE-2024-12852 MEDIUM 6.4 UPGRADE The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ha_c
- CVE-2024-12812 HIGH 7.5 UPGRADE The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plu
- CVE-2024-12808 MEDIUM 4.8 UPGRADE The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plu
- CVE-2024-12195 MEDIUM 6.5 UPGRADE The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plu
- CVE-2024-10548 MEDIUM 6.5 UPGRADE The WP Project Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up
- CVE-2024-10520 MEDIUM 5.3 UPGRADE The WP Project Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missin
- CVE-2024-10174 HIGH 7.3 UPGRADE The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plu
- CVE-2023-45765 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Contr
- CVE-2023-40003 MEDIUM 6.5 UPGRADE Missing Authorization vulnerability in weDevs WP Project Manager wedevs-project-manager allows Exploiting Inco
FAQ
How do I fix wedevs vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wedevs being exploited right now?
None of the tracked wedevs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wedevs CVE should I patch first?
CVE-2024-12812 currently ranks highest (48/100): The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plu.