CVE-2026-116512 | wedevs Project Manager Plugin up to 4.1.1 on WordPress WP_REST_Server::dispatch id os command injection

October 31, 2026 Yanac

A vulnerability marked as critical has been reported in wedevs Project Manager Plugin up to 4.1.1 on WordPress. Affected by this vulnerability is the function WP_REST_Server::dispatch. This manipulation of the argument ID causes os command injection.

This vulnerability is tracked as CVE-2026-116512. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More