Ov3rkll Projectlist
2 CVEs affecting Ov3rkll Projectlist. Latest disclosed: 2025-11-25. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-13376 | High | 7.2 | 2025-11-25 | The ProjectList plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 0.3.0. T… |
CVE-2025-13370 | Medium | 4.9 | 2025-11-25 | The ProjectList plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 0.3.0 due to insuff… |