weDevs WP Project Manager Sensitive Data Exposure Vulnerability

A vulnerability allowing sensitive data exposure has been identified in the weDevs WP Project Manager plugin, affecting versions through 2.6.25. This vulnerability arises from the use of hard-coded credentials, which could allow unauthorized retrieval of embedded sensitive data.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, which is typically restricted from regular users. Such data exposure could be leveraged to exploit other vulnerabilities within the system.