Vulnerabilities in Taskbuilder
10 resultsCVE-2025-22716HIGHWordPress Taskbuilder Plugin <= 3.0.6 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-52697HIGHWordPress Taskbuilder plugin <= 5.0.7 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-1639MEDIUMTaskbuilder <= 5.0.2 - Authenticated (Subscriber+) SQL Injection via 'order' and 'sort_by' ParametersEPSS 0.3%CVE-2024-11930MEDIUMTaskbuilder – WordPress Project & Task Management plugin <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via wppm_tasks ShortcodeEPSS 0.3%CVE-2025-30945MEDIUMWordPress Taskbuilder plugin <= 4.0.7 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2025-39569HIGHWordPress Taskbuilder plugin <= 4.0.1 - SQL Injection VulnerabilityEPSS 0.3%CVE-2026-1640MEDIUMTaskbuilder <= 5.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Project/Task Comment CreationEPSS 0.3%CVE-2026-2289MEDIUMTaskbuilder <= 5.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Block Emails' FieldEPSS 0.3%CVE-2026-6225MEDIUMTaskbuilder – Project Management & Task Management Tool With Kanban Board <= 5.0.6 - Authenticated (Subscriber+) Time-Based Blind SQL Injection via 'project_search' ParameterEPSS 0.2%CVE-2025-67933HIGHWordPress Taskbuilder plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%