Taskbuilder vulnerabilities
4 known CVE vulnerabilities in Taskbuilder, translated and rated.
- CVE-2026-95599High
Blind SQL Injection vulnerability in the Taskbuilder plugin. Affects versions from n/a through 6.0.5.
- CVE-2026-12110Medium
The Taskbuilder plugin for WordPress up to version 5.0.8 is vulnerable to generic SQL injection via the 'task_search' parameter due to insufficient escaping and lack of query preparation. Authenticated attackers with subscriber-level access or higher can append malicious SQL queries.
- CVE-2026-12090Medium
The Taskbuilder plugin for WordPress is vulnerable to generic SQL injection via the 'wppm_proj_filter' parameter in versions up to 5.0.8. Insufficient escaping and lack of query preparation allow authenticated attackers (subscriber-level and above) to append additional SQL queries, enabling extraction of sensitive database information.
- CVE-2026-52697High
There is a SQL Injection vulnerability in Taskbuilder versions <= 5.0.7 that can be exploited by subscribers.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS