Taskbuilder vulnerabilities

Products

• Taskbuilder 11
• – Project Management & Task Management Tool With Kanban Board 8

Newest

• taskbuilder WordPress Taskbuilder plugin <= 6.0.5 - SQL Injection vulnerability CVE-2026-95599 8.5 HighOctober 9, 2026
• taskbuilder – project management & task management tool with kanban board Taskbuilder <= 5.0.9 - Authenticated (Subscriber+) SQL Injection CVE-2026-15267 6.5 MediumJuly 28, 2026
• taskbuilder – project management & task management tool with kanban board Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'wppm_proj_filter' Parameter CVE-2026-12090 6.5 MediumJuly 1, 2026
• taskbuilder – project management & task management tool with kanban board Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'task_search' Parameter CVE-2026-12110 6.5 MediumJuly 1, 2026
• taskbuilder Taskbuilder < 5.0.8 - Reflected XSS via Shortcode CVE-2026-9570 7.1 HighJune 17, 2026
• taskbuilder WordPress Taskbuilder plugin <= 5.0.7 - SQL Injection vulnerability CVE-2026-52697 8.5 HighJune 15, 2026
• taskbuilder – project management & task management tool with kanban board Taskbuilder – Project Management & Task Management Tool With Kanban Board <= 5.0.6 - Authenticated (Subscriber+) Time-Based Blind SQL Injection via 'project_search' Parameter CVE-2026-6225 6.5 MediumMay 14, 2026
• taskbuilder – project management & task management tool with kanban board Taskbuilder <= 5.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Block Emails' Field CVE-2026-2289 4.4 MediumMarch 4, 2026
• taskbuilder – project management & task management tool with kanban board Taskbuilder <= 5.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Project/Task Comment Creation CVE-2026-1640 4.3 MediumFebruary 18, 2026
• taskbuilder – project management & task management tool with kanban board Taskbuilder <= 5.0.2 - Authenticated (Subscriber+) SQL Injection via 'order' and 'sort_by' Parameters CVE-2026-1639 6.5 MediumFebruary 18, 2026
• taskbuilder WordPress Taskbuilder plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability CVE-2025-67933 7.1 HighJanuary 8, 2026
• taskbuilder WordPress Taskbuilder plugin <= 4.0.7 - Broken Access Control Vulnerability CVE-2025-30945 5.3 MediumJune 6, 2025
• taskbuilder Taskbuilder < 3.0.9 - Admin+ SQL Injection CVE-2024-9831 7.2 HighMay 15, 2025
• taskbuilder WordPress Taskbuilder plugin <= 4.0.1 - SQL Injection Vulnerability CVE-2025-39569 8.5 HighApril 17, 2025
• taskbuilder WordPress Taskbuilder Plugin <= 3.0.6 - SQL Injection vulnerability CVE-2025-22716 8.5 HighJanuary 21, 2025
• taskbuilder, taskbuilder – project management & task management tool with kanban board +1 more Taskbuilder – WordPress Project & Task Management plugin <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via wppm_tasks Shortcode CVE-2024-11930 6.4 MediumJanuary 4, 2025
• taskbuilder Taskbuilder < 3.0.5 - Admin+ SQL Injection CVE-2024-9828 4.1 MediumNovember 21, 2024
• taskbuilder, taskbuilder – wordpress project & task management plugin, unknown taskbuilder – wordpress project & task management plugin +2 more TaskBuilder < 1.0.8 - Subscriber+ Stored XSS via SVG file upload CVE-2022-3137 5.4 MediumOctober 10, 2022