WordPress Plugin Security Update Advisory (CVE-2026-116512)

Overview

A security update has been released to address a vulnerability in a WordPress plugin.

Target Products

• weDevs Project Manager. – Version 4.1.1 or earlier.

Vulnerability Details

• CVE-2026-116512 is a pre-authentication remote code execution vulnerability caused by function injection via the id parameter in the weDevs Project Manager plugin. – Remote code execution is a type of vulnerability that allows a threat actor to execute arbitrary code on the target system.

Response

• The latest update includes the Vulnerability Patch. – As instructed on the reference website, you must update to version 4.1.2, which contains the latest Vulnerability Patch.