Propovoice — Vulnerabilities & Security Advisories 3

Propovoice is a WordPress plugin designed for proposal and contract management. Historically, it has been susceptible to multiple remote code execution vulnerabilities, often stemming from insufficient input validation and improper file handling. Cross-site scripting (XSS) has also been prevalent, allowing attackers to inject malicious scripts. The plugin has faced privilege escalation issues where users could gain unauthorized access to administrative functions. With three CVEs documented, Propovoice's security track record shows consistent weaknesses in access controls and data sanitization. No major public security incidents have been reported, but the documented vulnerabilities highlight ongoing risks in its architecture, particularly around file operations and user permissions.