CVE-2024-12015

SQL Injection in WordPress Project Manager Plugin PUBLISHED

Description (CNA)

The 'Project Manager' WordPress Plugin is affected by an authenticated SQL injection vulnerability in the 'orderby' parameter in the '/pm/v2/activites' route.

Affected (CNA)

Vendor / product	Versions
WeDevs / WP Project Manager	affected 0

CWE

CWE-89

References

https://www.tenable.com/security/research/tra-2024-47

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.