Skip to content
Threat Feed
Subscribe

Vendor

WeDevs

2 briefs RSS
critical advisory

The Project Manager WordPress Plugin: Unauthenticated Remote Code Execution (CVE-2026-116512)

The Project Manager - AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress contains a remote code execution vulnerability in versions up to and including 4.1.1.

PoC Project Manager
1c updated
high advisory

CVE-2026-8761: Privilege Escalation in Dokan WordPress Plugin

An improper authorization flaw in the Dokan plugin for WordPress allows authenticated attackers with vendor-level access to escalate privileges to administrator via manipulation of the REST API.

Dokan
1r 1t 1c