Vulnerabilities / Projectopia – WordPress Project Management
Projectopia – WordPress Project Management vulnerabilities
Advisories WPSec published for Projectopia – Project Management Tool. Other sources may list more. Its attack surface: Projectopia – WordPress Project Management on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-29 | WPSEC-2026-1955 | Projectopia – WordPress Project Management <= 5.1.25.2 - Unauthenticated Privilege Escalation via Account Takeover through Client Profile and Contact Editing | Critical 9.8 | 5.1.26 |
| 2026-10-29 | WPSEC-2026-1954 | Projectopia – WordPress Project Management <= 5.1.25.2 - Unauthenticated Missing Authorization to Task Creation, Contract Email Sending and Client Alert Clearing | Medium 5.3 | 5.1.26 |
| 2026-10-29 | WPSEC-2026-1953 | Projectopia – WordPress Project Management <= 5.1.25.2 - Unauthenticated Missing Authorization to Arbitrary User Deletion via Client Contact Removal | High 8.2 | 5.1.26 |
License: CC BY 4.0