Read the docs

Projectopia

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Projectopia records in CISA KEV

No Projectopia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Projectopia 1 record LOW

Records

6 records

TI-2025-23713 CVE-2025-32648 · GHSA-pr78-wj2j-7c98

WordPress Projectopia plugin <= 5.1.24 - Privilege Escalation vulnerability

Priority MEDIUM 49

Incorrect Privilege Assignment vulnerability in Projectopia Projectopia projectopia-core allows Privilege Escalation.This issue affects Projectopia: from n/a through <= 5.1.24.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00442 Published 2025-04-17 No fix listed CWE-266
TI-2024-36424 CVE-2024-54336 · GHSA-h9xx-632f-3wf6

WordPress Projectopia plugin <= 5.1.7 - Account Takeover vulnerability

Priority MEDIUM 41

Authentication Bypass Using an Alternate Path or Channel vulnerability in Projectopia Projectopia projectopia-core allows Authentication Bypass.This issue affects Projectopia: from n/a through <= 5.1.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00664 Published 2024-12-13 No fix listed CWE-288
TI-2025-03495 CVE-2025-3952 · GHSA-mgcr-297w-jg79

Missing authorization in Projectopia – Project Management Tool

Priority LOW 38

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'pto_remove_logo' funct…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00437 Published 2025-05-01 No fix listed CWE-862
TI-2025-11795 CVE-2025-12876 · GHSA-45cx-fj69-47wf

Missing authorization in Projectopia – Project Management Tool

Priority LOW 30

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pto_delete_file AJAX action in all versions up to, and inclu…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00364 Published 2025-12-05 No fix listed CWE-862
TI-2025-30583 CVE-2025-48257 · GHSA-wmcj-rj62-7q33

WordPress Projectopia plugin <= 5.1.17 - Broken Access Control Vulnerability

Priority LOW 29

Missing Authorization vulnerability in Projectopia Projectopia projectopia-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Projectopia: from n/a through <= 5.1.17.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00413 Published 2025-05-19 No fix listed CWE-862
Open these records in search →