Project Management Bug And Issue Tracking Plugin

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-12877 Jul 24, 06:00 CRITICAL POC PATCH Act Now

Unauthenticated SQL injection in the 'Project Management, Bug and Issue Tracking Plugin' for WordPress before version 5.1.0 enables remote attackers to extract or modify database contents via the standard front-end issue tracker. Exploit code is publicly available, and the vulnerability has a high CVSS score of 9.1, though EPSS probability remains low at 0.14%.

WordPress Authentication Bypass SQLi Project Management Bug And Issue Tracking Plugin Unknown

NVD WPScan VulDB

CVSS 3.1

9.1

EPSS

0.1%

CVE-2026-12877

EPSS 0% CVSS 9.1

CRITICAL POC PATCH Act Now

Unauthenticated SQL injection in the 'Project Management, Bug and Issue Tracking Plugin' for WordPress before version 5.1.0 enables remote attackers to extract or modify database contents via the standard front-end issue tracker. Exploit code is publicly available, and the vulnerability has a high CVSS score of 9.1, though EPSS probability remains low at 0.14%.

WordPress Authentication Bypass SQLi +2

NVD WPScan VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy