WordPress security by component
UpStream: a Project Management Plugin for WordPress
Plugin description
UpStream: a Project Management Plugin for WordPress is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 20, 2025; the highest published CVSS base score is 4.3.
Plugin slug:
authorization-vulnerability-in-upstreamplugin-upstream-a-project-managementLatest vulnerability
CVE-2025-49974: UpStream: a Project Management Plugin for WordPress: A security weakness
UpStream: a Project Management Plugin for WordPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
| Safe version |
|
||
|---|---|---|---|
| Jun 20, 2025 |
CVE-2025-49974
UpStream: a Project Management Plugin for WordPress: A security weakness
UpStream: a Project Management Plugin for WordPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
|
See mitigation notes |
CVE4.3
NVDPending
|