cleantalk
Vulnerabilities and Security Researches

WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts, CVE-2025-22649

CVE, Research URL

CVE-2025-22649

Published on
Mar 27, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP Project Manager wedevs-project-manager allows Stored XSS.This issue affects WP Project Manager: from n/a through 2.6.22.
Affected versions
Min -, max 2.6.21.
Status
vulnerable