Taskbuilder Taskbuilder – Project Management & Task Management Tool With Kanban Board

• CVE-2026-15267 Medium 6.5 Taskbuilder <= 5.0.9 - Authenticated (Subscriber+) SQL Injection 0.4%
• CVE-2026-12090 Medium 6.5 Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'wppm_proj_filter' Parameter 0.5%
• CVE-2026-12110 Medium 6.5 Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'task_search' Parameter 0.6%
• CVE-2026-6225 Medium 6.5 Taskbuilder – Project Management & Task Management Tool With Kanban Board <= 5.0.6 - Authenticated (Subscriber+) Time-Based Blind SQL Injection via 'project_search' Parameter 0.2%
• CVE-2026-2289 Medium 4.4 Taskbuilder <= 5.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Block Emails' Field 0.3%
• CVE-2026-1640 Medium 4.3 Taskbuilder <= 5.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Project/Task Comment Creation 0.3%
• CVE-2026-1639 Medium 6.5 Taskbuilder <= 5.0.2 - Authenticated (Subscriber+) SQL Injection via 'order' and 'sort_by' Parameters 0.4%
• CVE-2024-11930 Medium 6.4 Taskbuilder – WordPress Project & Task Management plugin <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via wppm_tasks Shortcode 0.3%