Wp Pmanager

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:wp-pmanager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductWp Pmanager (0e48c7a2-8a54-5ffa-867b-ceafd38624fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2248 vulnerable 2026-06-08 07:16:56.564006 WP-PManager <= 1.2 - Admin+ SQL Injection
The WP-PManager WordPress plugin through 1.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
Published: 2025-05-15T20:07:27.813Z
Updated: 2025-05-16T20:22:26.373Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2247 vulnerable 2026-06-08 07:16:56.562592 WP-PManager <= 1.2 - Category Deletion via CSRF
The WP-PManager WordPress plugin through 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Published: 2025-05-15T20:07:27.502Z
Updated: 2025-05-16T20:23:31.203Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13875 vulnerable 2026-06-08 06:25:38.676328 WP Programmmanager <= 1.2 - Reflected XSS
The WP-PManager WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Published: 2025-03-20T06:00:02.741Z
Updated: 2025-03-20T19:12:27.612Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.