Worklenz vulnerabilities
We track 2 vulnerabilities in Worklenz products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 3, 2026.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest Worklenz vulnerabilities
- 8.1 High severity
worklenz: Improper Neutralization of Special Elements used in an SQL Command
Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowing authenticated users to inject arbitrary PostgreSQL expressions into ORDER BY clauses. Attackers can use time-based and boolean-based blind
- 8.8 High severity
worklenz: Improper Neutralization of Special Elements used in an SQL Command
Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affecting project and task management controllers, reporting and financial data endpoints, real-time socke