CVE-2026-116512

Published 31 October 2026 · tracked since 31 October 2026

Description

The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is due to unsanitized 'id' parameter value concatenated dir

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-118636 CRITICAL 9.8
• CVE-2026-120203 HIGH 8.8
• CVE-2026-76010 HIGH 8.8
• CVE-2026-120114 HIGH 7.2
• CVE-2026-109197 HIGH 7.5
• CVE-2026-118235 CRITICAL 9.8
• CVE-2026-120075 HIGH 7.2
• CVE-2026-103882 CRITICAL 9.1
• CVE-2026-110530 HIGH 7.2
• CVE-2026-119096 CRITICAL 9.8

→ Open the live CVE board · all tools