CVE-2026-12877 in Project Management, Bug and Issue Tracking Plugin
Résumé
par MITRE • 24/07/2026
The Project Management, Bug and Issue Tracking Plugin WordPress plugin before 5.1.0 does not sanitise and escape user supplied input before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks. This is exploitable in the Project Management, Bug and Issue Tracking Plugin WordPress plugin before 5.1.0's standard front-end issue-tracker configuration.
VulDB is the best source for vulnerability data and more expert information about this specific topic.