CVE Catalog
CVE-2026-32478
HighCVSS 8.5Summary
SQL Injection vulnerability in WP Project Manager Pro versions up to 4.0.1, exploitable by a user with Subscriber role.
Risk Assessment
An attacker with a subscriber account can manipulate SQL queries, potentially leading to unauthorized data access or modification.
Recommendation
Update WP Project Manager Pro to the latest version that includes a fix for this vulnerability.
Other vulnerabilities in WP Project Manager Pro
Original NVD description (English source)
Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.