# Projectworlds vulnerabilities Source: https://junglewise.ai/threats/vendors/projectworlds Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/projectworlds.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 38 vulnerabilities in Projectworlds: 0 in the last 7 days and 6 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-114266, was published on 21 October 2026. 5 vulnerabilities in the last four weeks, up from none in the four before. 3 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 5 - Last 90 days: 6 - All time: 38 (1 critical, 0 exploited in the wild) ## About Projectworlds A provider of educational and business software source code. ## Latest Projectworlds vulnerabilities - [CVE-2026-114266: ProjectWorlds Advanced Library Management System SQL injection in profile.php](https://junglewise.ai/threats/cve-2026-114266-a-security-vulnerability-has-been-detected-in-projectworlds) (medium, CVSS 6.3, published 21 Oct 2026) - [CVE-2026-114265: ProjectWorlds Advanced Library Management System SQL injection in search](https://junglewise.ai/threats/cve-2026-114265-a-weakness-has-been-identified-in-projectworlds-advanced-library) (medium, CVSS 6.3, published 21 Oct 2026) - [CVE-2026-114264: ProjectWorlds Advanced Library Management System SQL injection in edit_member.php](https://junglewise.ai/threats/cve-2026-114264-a-security-flaw-has-been-discovered-in-projectworlds-advanced) (medium, CVSS 4.7, published 21 Oct 2026) - [CVE-2026-114263: ProjectWorlds Advanced Library Management System SQL injection in roll_number](https://junglewise.ai/threats/cve-2026-114263-a-vulnerability-was-identified-in-projectworlds-advanced-library) (high, CVSS 7.3, published 21 Oct 2026) - [CVE-2026-114039: ProjectWorlds Advanced Library Management System SQL injection in report_search.php](https://junglewise.ai/threats/cve-2026-114039-a-weakness-has-been-identified-in-projectworlds-advanced-library) (medium, CVSS 6.3, published 21 Oct 2026) - [CVE-2026-86226: Projectworlds Online Attendance System stored XSS in profile email field](https://junglewise.ai/threats/cve-2026-86226-projectworlds-online-attendance-system-stored-xss-in-profile) (low, CVSS 3.5, published 6 Sep 2026) - [CVE-2026-10875: projectworlds Online Art Gallery Shop Project SQL injection in adminHome.php](https://junglewise.ai/threats/cve-2026-10875-projectworlds-online-art-gallery-shop-project-sql-injection-in) (medium, CVSS 6.3, published 4 Jun 2026) - [CVE-2026-10874: Projectworlds Online Art Gallery Shop Project SQL injection in adminHome.php](https://junglewise.ai/threats/cve-2026-10874-projectworlds-online-art-gallery-shop-project-sql-injection-in) (medium, CVSS 6.3, published 4 Jun 2026) - [CVE-2026-9364: projectworlds Online Art Gallery Shop SQL injection in adminHome.php](https://junglewise.ai/threats/cve-2026-9364-projectworlds-online-art-gallery-shop-sql-injection-in-adminhome) (high, CVSS 7.3, published 24 May 2026) - [CVE-2025-70147: ProjectWorlds Online Time Table Generator missing authentication in admin pages](https://junglewise.ai/threats/cve-2025-70147-projectworlds-online-time-table-generator-missing-authentication) (high, CVSS 7.5, published 18 Feb 2026) - [CVE-2025-70146: ProjectWorlds Online Time Table Generator missing authentication in admin deletion endpoints](https://junglewise.ai/threats/cve-2025-70146-projectworlds-online-time-table-generator-missing-authentication) (critical, CVSS 9.1, published 18 Feb 2026) - [CVE-2026-0643: A flaw has been found in projectworlds House Rental and Property Listing 1.0. Impacted is an unknown function of the file…](https://junglewise.ai/threats/cve-2026-0643-a-flaw-has-been-found-in-projectworlds-house-rental-and-property) (high, CVSS 7.3, published 7 Jan 2026) - [CVE-2026-0642: A vulnerability was detected in projectworlds House Rental and Property Listing 1.0. This issue affects some unknown…](https://junglewise.ai/threats/cve-2026-0642-a-vulnerability-was-detected-in-projectworlds-house-rental-and) (low, CVSS 2.4, published 7 Jan 2026) - [CVE-2025-14571: A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some…](https://junglewise.ai/threats/cve-2025-14571-a-vulnerability-has-been-found-in-projectworlds-advanced-library) (high, CVSS 7.3, published 12 Dec 2025) - [CVE-2025-14570: A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an…](https://junglewise.ai/threats/cve-2025-14570-a-flaw-has-been-found-in-projectworlds-advanced-library) (high, CVSS 7.3, published 12 Dec 2025) - [CVE-2025-14527: A weakness has been identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects…](https://junglewise.ai/threats/cve-2025-14527-a-weakness-has-been-identified-in-projectworlds-advanced-library) (high, CVSS 7.3, published 11 Dec 2025) - [CVE-2025-14212: A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown…](https://junglewise.ai/threats/cve-2025-14212-a-flaw-has-been-found-in-projectworlds-advanced-library) (high, CVSS 7.3, published 8 Dec 2025) - [CVE-2025-14211: A vulnerability was detected in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability…](https://junglewise.ai/threats/cve-2025-14211-a-vulnerability-was-detected-in-projectworlds-advanced-library) (high, CVSS 7.3, published 8 Dec 2025) - [CVE-2025-14210: A security vulnerability has been detected in projectworlds Advanced Library Management System 1.0. Affected is an…](https://junglewise.ai/threats/cve-2025-14210-a-security-vulnerability-has-been-detected-in-projectworlds) (high, CVSS 7.3, published 8 Dec 2025) - [CVE-2025-13573: A security flaw has been discovered in projectworlds can pass malicious payloads up to 1.0. This vulnerability affects…](https://junglewise.ai/threats/cve-2025-13573-a-security-flaw-has-been-discovered-in-projectworlds-can-pass) (medium, CVSS 6.3, published 24 Nov 2025) - [CVE-2025-13572: A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This affects an unknown part…](https://junglewise.ai/threats/cve-2025-13572-a-vulnerability-was-identified-in-projectworlds-advanced-library) (high, CVSS 7.3, published 23 Nov 2025) - [CVE-2025-13278: A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Impacted is an unknown…](https://junglewise.ai/threats/cve-2025-13278-a-vulnerability-has-been-found-in-projectworlds-advanced-library) (medium, CVSS 6.3, published 17 Nov 2025) - [CVE-2025-13256: A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of…](https://junglewise.ai/threats/cve-2025-13256-a-weakness-has-been-identified-in-projectworlds-advanced-library) (medium, CVSS 6.3, published 17 Nov 2025) - [CVE-2025-13255: A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. This issue affects some…](https://junglewise.ai/threats/cve-2025-13255-a-security-flaw-has-been-discovered-in-projectworlds-advanced) (medium, CVSS 6.3, published 17 Nov 2025) - [CVE-2025-13254: A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects…](https://junglewise.ai/threats/cve-2025-13254-a-vulnerability-was-identified-in-projectworlds-advanced-library) (medium, CVSS 6.3, published 17 Nov 2025) ## Most severe Projectworlds vulnerabilities - [CVE-2025-70146: ProjectWorlds Online Time Table Generator missing authentication in admin deletion endpoints](https://junglewise.ai/threats/cve-2025-70146-projectworlds-online-time-table-generator-missing-authentication) (critical, CVSS 9.1, published 18 Feb 2026) - [CVE-2025-70147: ProjectWorlds Online Time Table Generator missing authentication in admin pages](https://junglewise.ai/threats/cve-2025-70147-projectworlds-online-time-table-generator-missing-authentication) (high, CVSS 7.5, published 18 Feb 2026) - [CVE-2025-12237: A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown…](https://junglewise.ai/threats/cve-2025-12237-a-vulnerability-was-identified-in-projectworlds-advanced-library) (high, CVSS 7.3, published 27 Oct 2025) - [CVE-2025-13572: A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This affects an unknown part…](https://junglewise.ai/threats/cve-2025-13572-a-vulnerability-was-identified-in-projectworlds-advanced-library) (high, CVSS 7.3, published 23 Nov 2025) - [CVE-2025-11557: A vulnerability has been found in projectworlds Gate Pass Management System 1.0. This issue affects some unknown…](https://junglewise.ai/threats/cve-2025-11557-a-vulnerability-has-been-found-in-projectworlds-gate-pass) (high, CVSS 7.3, published 9 Oct 2025) - [CVE-2025-14571: A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some…](https://junglewise.ai/threats/cve-2025-14571-a-vulnerability-has-been-found-in-projectworlds-advanced-library) (high, CVSS 7.3, published 12 Dec 2025) - [CVE-2025-14570: A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an…](https://junglewise.ai/threats/cve-2025-14570-a-flaw-has-been-found-in-projectworlds-advanced-library) (high, CVSS 7.3, published 12 Dec 2025) - [CVE-2025-12938: A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an…](https://junglewise.ai/threats/cve-2025-12938-a-vulnerability-was-identified-in-projectworlds-online-admission) (high, CVSS 7.3, published 10 Nov 2025) - [CVE-2026-0643: A flaw has been found in projectworlds House Rental and Property Listing 1.0. Impacted is an unknown function of the file…](https://junglewise.ai/threats/cve-2026-0643-a-flaw-has-been-found-in-projectworlds-house-rental-and-property) (high, CVSS 7.3, published 7 Jan 2026) - [CVE-2025-12215: A flaw has been found in projectworlds Online Shopping System 1.0. Impacted is an unknown function of the file…](https://junglewise.ai/threats/cve-2025-12215-a-flaw-has-been-found-in-projectworlds-online-shopping-system-1-0) (high, CVSS 7.3, published 27 Oct 2025) ## Vulnerabilities per week 5 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 1 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 5 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Projectworlds technologies - [Projectworlds Advanced Library Management System](https://junglewise.ai/threats/technologies/advanced-library-management-system): 20 vulnerabilities - [Projectworlds Expense Management System](https://junglewise.ai/threats/technologies/expense-management-system): 4 vulnerabilities - [Projectworlds Online Art Gallery Shop Project](https://junglewise.ai/threats/technologies/online-art-gallery-shop-project): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Projectworlds vulnerabilities", https://junglewise.ai/threats/vendors/projectworlds, 11 November 2026.