Worklenz vulnerabilities

2 known vulnerabilities in Worklenz from Worklenz. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  worklenz: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-85388Sep 3, 2026Worklenz

  Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowing authenticated users to inject arbitrary PostgreSQL expressions into ORDER BY clauses. Attackers can use time-based and boolean-based blind

• 8.8 High severity

  worklenz: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-25947Feb 10, 2026Worklenz

  Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affecting project and task management controllers, reporting and financial data endpoints, real-time socke