Vulnerabilities

TI-2025-26092 CVE-2025-39350 · GHSA-6r4g-8vrx-4gmq

WordPress wProject theme < 5.8.0 - Unauthenticated Post/Comment/Attachment Modification/Deletion vulnerability

MEDIUM 42

Missing Authorization vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0033 Published 2025-05-19 Fixed in 5.8.0 CWE-862

TI-2025-26107 CVE-2025-39365 · GHSA-258r-rc8h-56rv

WordPress wProject theme < 5.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rocket Apps wProject allows Reflected XSS.This issue affects wProject: from n/a before 5.8.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00233 Published 2025-05-19 Fixed in 5.8.0 CWE-79

TI-2025-26108 CVE-2025-39366 · GHSA-crp9-8xr4-fg7p

WordPress wProject theme < 5.8.0 - Subscriber+ Privilege Escalation vulnerability

MEDIUM 40

Incorrect Privilege Assignment vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00359 Published 2025-05-19 Fixed in 5.8.0 CWE-266

Vulnerabilities

Filters

WordPress wProject theme < 5.8.0 - Unauthenticated Post/Comment/Attachment Modification/Deletion vulnerability

WordPress wProject theme < 5.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress wProject theme < 5.8.0 - Subscriber+ Privilege Escalation vulnerability