agentprime: wedevs-project-manager-ai-powered-project-management-task-management-kanban-boarEvery new CVE for wedevs-project-manager-ai-powered-project-management-task-management-kanban-boar.https://agentprime.io/CVE-2026-116512: Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injectionhttps://agentprime.io/advisories/CVE-2026-116512/https://agentprime.io/advisories/CVE-2026-116512/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 07:46:51 GMTCVEcriticalCVE-2025-8994: WP Project Manager <= 2.6.26 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator'https://agentprime.io/advisories/CVE-2025-8994/https://agentprime.io/advisories/CVE-2025-8994/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 15 Nov 2025 05:45:33 GMTCVECVE-2025-2541: WP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadhttps://agentprime.io/advisories/CVE-2025-2541/https://agentprime.io/advisories/CVE-2025-2541/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Apr 2025 11:11:56 GMTCVECVE-2025-3100: WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploadhttps://agentprime.io/advisories/CVE-2025-3100/https://agentprime.io/advisories/CVE-2025-3100/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Apr 2025 04:21:20 GMTCVECVE-2024-13500: WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameterhttps://agentprime.io/advisories/CVE-2024-13500/https://agentprime.io/advisories/CVE-2024-13500/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 15 Feb 2025 11:26:48 GMTCVECVE-2024-13752: WP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Updatehttps://agentprime.io/advisories/CVE-2024-13752/https://agentprime.io/advisories/CVE-2024-13752/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 15 Feb 2025 09:24:23 GMTCVECVE-2024-12195: WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL Injectionhttps://agentprime.io/advisories/CVE-2024-12195/https://agentprime.io/advisories/CVE-2024-12195/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 04 Jan 2025 11:24:20 GMTCVECVE-2024-10548: WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST APIhttps://agentprime.io/advisories/CVE-2024-10548/https://agentprime.io/advisories/CVE-2024-10548/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Dec 2024 01:45:13 GMTCVECVE-2024-10520: WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletionhttps://agentprime.io/advisories/CVE-2024-10520/https://agentprime.io/advisories/CVE-2024-10520/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 Nov 2024 11:33:10 GMTCVECVE-2024-10174: WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.13 - Insecure Direct Object Reference to Unauthenticated Authorization Bypasshttps://agentprime.io/advisories/CVE-2024-10174/https://agentprime.io/advisories/CVE-2024-10174/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 03:20:08 GMTCVECVE-2023-3636: WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalationhttps://agentprime.io/advisories/CVE-2023-3636/https://agentprime.io/advisories/CVE-2023-3636/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Aug 2023 05:33:09 GMTCVECVE-2020-36745: WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypasshttps://agentprime.io/advisories/CVE-2020-36745/https://agentprime.io/advisories/CVE-2020-36745/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Jul 2023 04:26:51 GMTCVE