WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker

Ease Project Management and Task Management using a powerful project manager with Kanban board, Gantt chart, milestone tracking & project reporting.

23Reported vulnerabilities
8.8Highest CVSS score
4.0.6Latest version
6,000+Active installs

What to do now

Update Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker to 4.0.7 or later. 23 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 20, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2023-3636 High 8.8 0.9% Before 2.6.5 2.6.5 August 31, 2023
CVE-2023-34383 High 8.8 0.6% 2.6.0 and earlier 2.6.1 September 4, 2023
CVE-2020-36745 High 8.8 0.4% 2.4.0 and earlier 2.4.1 July 1, 2023
CVE-2024-12015 High 7.7 0.5% 0 and later 3.0.0 December 2, 2024
CVE-2024-10174 High 7.3 0.7% Before 2.6.14 2.6.14 November 13, 2024
CVE-2024-13752 Medium 6.5 0.5% Before 2.6.18 2.6.18 February 15, 2025
CVE-2025-8994 Medium 6.5 0.3% 0 to 2.6.26 (inclusive) 2.6.27 November 15, 2025
CVE-2024-13500 Medium 6.5 0.4% Before 2.6.18 2.6.18 February 15, 2025
CVE-2024-12195 Medium 6.5 0.4% Before 2.6.17 2.6.17 January 4, 2025
CVE-2024-10548 Medium 6.5 0.4% Before 2.6.16 2.6.16 December 19, 2024
CVE-2023-49860 Medium 6.4 0.4% 2.6.8 and earlier 2.6.9 December 7, 2023
CVE-2025-2541 Medium 5.4 0.3% Before 2.6.23 2.6.23 April 11, 2025
CVE-2025-3100 Medium 5.4 0.3% Before 2.6.23 2.6.23 April 9, 2025
CVE-2021-36826 Medium 5.4 0.6% 2.4.13 and earlier 2.4.14 October 11, 2021
CVE-2026-74928 Medium 5.3 0.3% 2.1.0 to 4.0.6 (inclusive) 4.0.7 August 24, 2026
CVE-2025-58269 Medium 5.3 0.3% 2.6.25 and earlier 2.6.26 September 22, 2025
CVE-2024-10520 Medium 5.3 0.3% Before 2.6.15 2.6.15 November 20, 2024
CVE-2023-40003 Medium 5.3 0.5% 2.6.7 and earlier 2.6.8 December 7, 2023
CVE-2025-22649 Medium 4.4 0.3% 2.6.22 and earlier 2.6.23 February 3, 2025
CVE-2026-74929 Medium 4.3 0.2% Before 4.0.7 4.0.7 August 26, 2026
CVE-2026-74930 Medium 4.3 0.2% 2.2.0 to 4.0.6 (inclusive) 4.0.7 August 26, 2026
CVE-2025-68040 Medium 4.3 0.3% 3.0.1 and earlier 3.0.2 December 26, 2025
CVE-2025-32280 Medium 4.3 0.2% 2.6.24 and earlier 2.6.25 April 4, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.