CVE-2026-78262

The vulnerability allows unauthenticated PHP Object Injection in WP Project Manager versions up to 4.0.6, potentially enabling attackers to execute arbitrary code on the server. This critical flaw poses a significant risk to any installations of the affected plugin, making it essential for website administrators and security teams to prioritize immediate updates or mitigations. Organizations using this plugin should take urgent action to protect their systems from potential exploitation.