Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Projectopia Clear all filters
TI-2025-11795 CVE-2025-12876 · GHSA-45cx-fj69-47wf

Missing authorization in Projectopia – Project Management Tool

Priority LOW 30

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pto_delete_file AJAX action in all versions up to, and inclu…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00364 Published 2025-12-05 No fix listed CWE-862
TI-2025-30583 CVE-2025-48257 · GHSA-wmcj-rj62-7q33

WordPress Projectopia plugin <= 5.1.17 - Broken Access Control Vulnerability

Priority LOW 29

Missing Authorization vulnerability in Projectopia Projectopia projectopia-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Projectopia: from n/a through <= 5.1.17.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00413 Published 2025-05-19 No fix listed CWE-862
TI-2025-03495 CVE-2025-3952 · GHSA-mgcr-297w-jg79

Missing authorization in Projectopia – Project Management Tool

Priority LOW 38

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'pto_remove_logo' funct…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00437 Published 2025-05-01 No fix listed CWE-862
TI-2025-23713 CVE-2025-32648 · GHSA-pr78-wj2j-7c98

WordPress Projectopia plugin <= 5.1.24 - Privilege Escalation vulnerability

Priority MEDIUM 49

Incorrect Privilege Assignment vulnerability in Projectopia Projectopia projectopia-core allows Privilege Escalation.This issue affects Projectopia: from n/a through <= 5.1.24.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00442 Published 2025-04-17 No fix listed CWE-266
TI-2024-36424 CVE-2024-54336 · GHSA-h9xx-632f-3wf6

WordPress Projectopia plugin <= 5.1.7 - Account Takeover vulnerability

Priority MEDIUM 41

Authentication Bypass Using an Alternate Path or Channel vulnerability in Projectopia Projectopia projectopia-core allows Authentication Bypass.This issue affects Projectopia: from n/a through <= 5.1.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00664 Published 2024-12-13 No fix listed CWE-288