Taskbuilder

Products

ProductCVEsExploitedLatest
Taskbuilder – Project Management & Task Management Tool With Kanban Board8–Jul 28, 2026
Taskbuilder6–Oct 9, 2026

Exploited and recent CVEs

  • CVE-2026-95599 High 8.5 WordPress Taskbuilder plugin <= 6.0.5 - SQL Injection vulnerability 0.2%
  • CVE-2026-15267 Medium 6.5 Taskbuilder <= 5.0.9 - Authenticated (Subscriber+) SQL Injection 0.4%
  • CVE-2026-12090 Medium 6.5 Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'wppm_proj_filter' Parameter 0.5%
  • CVE-2026-12110 Medium 6.5 Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'task_search' Parameter 0.6%
  • CVE-2026-52697 High 8.5 WordPress Taskbuilder plugin <= 5.0.7 - SQL Injection vulnerability 0.4%
  • CVE-2026-6225 Medium 6.5 Taskbuilder – Project Management & Task Management Tool With Kanban Board <= 5.0.6 - Authenticated (Subscriber+) Time-Based Blind SQL Injection via 'project_search' Parameter 0.2%
  • CVE-2026-2289 Medium 4.4 Taskbuilder <= 5.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Block Emails' Field 0.3%
  • CVE-2026-1640 Medium 4.3 Taskbuilder <= 5.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Project/Task Comment Creation 0.3%
  • CVE-2026-1639 Medium 6.5 Taskbuilder <= 5.0.2 - Authenticated (Subscriber+) SQL Injection via 'order' and 'sort_by' Parameters 0.4%
  • CVE-2025-67933 High 7.1 WordPress Taskbuilder plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-30945 Medium 5.3 WordPress Taskbuilder plugin <= 4.0.7 - Broken Access Control Vulnerability 0.4%
  • CVE-2025-39569 High 8.5 WordPress Taskbuilder plugin <= 4.0.1 - SQL Injection Vulnerability 0.4%
  • CVE-2025-22716 High 8.5 WordPress Taskbuilder Plugin <= 3.0.6 - SQL Injection vulnerability 0.4%
  • CVE-2024-11930 Medium 6.4 Taskbuilder – WordPress Project & Task Management plugin <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via wppm_tasks Shortcode 0.3%