Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

taskbuilder vulnerabilities

14 published CVEs name taskbuilder among the affected products.

Published CVEs
14
Last 12 months
10
Critical
0
Known exploited
0

Critical 0High 5Medium 9Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20254
  2. 202610

Newest CVEs

  • CVE-2026-95599

    WordPress Taskbuilder plugin <= 6.0.5 - SQL Injection vulnerability

    Taskbuilder · Taskbuilder

    High8.5
  • CVE-2026-15267

    Taskbuilder <= 5.0.9 - Authenticated (Subscriber+) SQL Injection

    taskbuilder · Taskbuilder – Project Management & Task Management Tool With Kanban Board

    Medium6.5
  • CVE-2026-12090

    Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'wppm_proj_filter' Parameter

    taskbuilder · Taskbuilder – Project Management & Task Management Tool With Kanban Board

    Medium6.5
  • CVE-2026-12110

    Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'task_search' Parameter

    taskbuilder · Taskbuilder – Project Management & Task Management Tool With Kanban Board

    Medium6.5
  • CVE-2026-52697

    WordPress Taskbuilder plugin <= 5.0.7 - SQL Injection vulnerability

    Taskbuilder · Taskbuilder

    High8.5
  • CVE-2026-6225

    Taskbuilder – Project Management & Task Management Tool With Kanban Board <= 5.0.6 - Authenticated (Subscriber+) Time-Based Blind SQL Injection via 'project_search' Parameter

    taskbuilder · Taskbuilder – Project Management & Task Management Tool With Kanban Board

    Medium6.5
  • CVE-2026-2289

    Taskbuilder <= 5.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Block Emails' Field

    taskbuilder · Taskbuilder – Project Management & Task Management Tool With Kanban Board

    Medium4.4
  • CVE-2026-1640

    Taskbuilder <= 5.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Project/Task Comment Creation

    taskbuilder · Taskbuilder – Project Management & Task Management Tool With Kanban Board

    Medium4.3
  • CVE-2026-1639

    Taskbuilder <= 5.0.2 - Authenticated (Subscriber+) SQL Injection via 'order' and 'sort_by' Parameters

    taskbuilder · Taskbuilder – Project Management & Task Management Tool With Kanban Board

    Medium6.5
  • CVE-2025-67933

    WordPress Taskbuilder plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability

    taskbuilder · Taskbuilder

    High7.1