Worklenz Worklenz
4 CVEs affecting Worklenz Worklenz. Latest disclosed: 2026-09-03. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-25947 | High | 8.8 | 2026-02-10 | Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affec… |
CVE-2026-85388 | High | 8.1 | 2026-09-03 | Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowing authenticated users to inject arbitra… |
CVE-2026-85389 | Medium | 6.5 | 2026-09-03 | Worklenz before 3.0.0 fails to verify task ownership by organization when resolving task-scoped API endpoints, allowing authenticated users to access another t… |
CVE-2025-70368 | Medium | 5.4 | 2026-01-26 | Worklenz version 2.1.5 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Project Updates feature. An attacker can submit a malicious payload in… |