WordPress plugin
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical1
- High4
- Medium23
- Low0
All Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Unauthenticated Remote Code Execution via 'id' Parameter Function Injection ≤4.1.1Update to 4.1.2 | CVE-2026-116512 | |
| High8.1 | Unauthenticated PHP Object Injection ≤4.0.6Update to 4.0.7 | CVE-2026-78262 | |
| High7.3 | Insecure Direct Object Reference to Unauthenticated Authorization Bypass ≤2.6.13Update to 2.6.14 | CVE-2024-10174 | |
| High8.8 | Authenticated (Subscriber+) SQL Injection ≤2.6.0Update to 2.6.1 | CVE-2023-34383 | |
| High8.8 | Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation ≤2.6.4Update to 2.6.5 | CVE-2023-3636 |
- Critical9.8Unauthenticated Remote Code Execution via 'id' Parameter Function Injection
≤4.1.1Update to 4.1.2
- High8.1Unauthenticated PHP Object Injection
≤4.0.6Update to 4.0.7
- High7.3Insecure Direct Object Reference to Unauthenticated Authorization Bypass
≤2.6.13Update to 2.6.14
- High8.8Authenticated (Subscriber+) SQL Injection
≤2.6.0Update to 2.6.1
- High8.8Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
≤2.6.4Update to 2.6.5
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker: common questions
Does Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker have known vulnerabilities?
Yes. VulnCrest Radar lists 28 known vulnerabilities in Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker: 1 critical, 4 high, 23 medium. At least one is not fixed in the latest version.
How do I check which version of Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker vulnerability?
CVE-2026-116512, published Oct 30, 2026: Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection. Severity: Critical (CVSS 9.8).
Is any Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker vulnerability listed in CISA KEV?
No. None of the known Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker vulnerabilities is currently listed in the CISA KEV catalog.