CVE Intelligence

Vulnerabilidades do Projectopia Projectopia – Project Management Tool

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Projectopia Projectopia – Project Management Tool: 1 registro(s), com versões afetadas e correções.

CVE-2025-12876 Média · 5.3 CWE-862 05/12/2025
Projectopia – WordPress Project Management <= 5.1.19 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pto_delete_file AJAX action in all versions up to, and including, 5.1.19. This makes it possible for unauthenticated attackers to delete arbitrary attachments.