Vulnerability history

Broken Access Control vulnerability

Unauthenticated Subscriber Account Creation vulnerability

Subscriber+ Cross-Project Task Disclosure and Task Board Modification vulnerability

WordPress Project Manager plugin 2.2.0-4.0.7 - 4.0.6 - Subscriber+ User Activity Feed Disclosure vulnerability

PHP Object Injection vulnerability

Sensitive Data Exposure vulnerability

Authenticated (Subscriber+) SQL Injection via 'completed_at_operator' vulnerability

Sensitive Data Exposure Vulnerability

Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Cross Site Request Forgery (CSRF) Vulnerability

Authenticated (Subscriber+) SQL Injection via orderby Parameter vulnerability

Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Subscriber+) SQL Injection vulnerability

Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API vulnerability

SQL Injection vulnerability

Missing Authorization to Project Milestone and Task Creation/Deletion vulnerability

Insecure Direct Object Reference to Unauthenticated Authorization Bypass vulnerability

Broken Access Control vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Request Forgery (CSRF) vulnerability

SQL Injection vulnerability

Arbitrary Usermeta Update to Authenticated Privilege Escalation

Stored Cross-Site Scripting (XSS) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability