Approved changes feed: RSS · Atom

cpe:2.3:a:taskbuilder:taskbuilder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTaskbuilder (c87ffe05-ff7a-59ec-807a-96fa12965b26)
ProductTaskbuilder (0ef329a7-ca0c-521a-a296-9bca2801d31a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-52697 vulnerable 2026-07-29 00:57:48.907773 WordPress Taskbuilder plugin <= 5.0.7 - SQL Injection vulnerability
HIGH (8.5)
Subscriber SQL Injection in Taskbuilder <= 5.0.7 versions.
Published: 2026-06-15T20:19:32.754Z
Updated: 2026-06-16T01:16:26.119Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67933 vulnerable 2026-06-08 07:41:20.612697 WordPress Taskbuilder plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in taskbuilder Taskbuilder taskbuilder allows Reflected XSS.This issue affects Taskbuilder: from n/a through <= 4.0.9.
Published: 2026-01-08T09:17:49.199Z
Updated: 2026-04-28T16:14:24.130Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39569 vulnerable 2026-06-08 07:23:06.778425 WordPress Taskbuilder plugin <= 4.0.1 - SQL Injection Vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through <= 4.0.1.
Published: 2025-04-17T15:46:47.156Z
Updated: 2026-04-28T16:12:34.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30945 vulnerable 2026-06-08 07:17:02.109341 WordPress Taskbuilder plugin <= 4.0.7 - Broken Access Control Vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in taskbuilder Taskbuilder taskbuilder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Taskbuilder: from n/a through <= 4.0.7.
Published: 2025-06-06T12:54:13.836Z
Updated: 2026-04-28T16:12:01.770Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22716 vulnerable 2026-06-08 07:10:54.668978 WordPress Taskbuilder Plugin <= 3.0.6 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in taskbuilder Taskbuilder taskbuilder allows SQL Injection.This issue affects Taskbuilder: from n/a through <= 3.0.6.
Published: 2025-01-21T13:57:34.811Z
Updated: 2026-05-11T23:00:49.950Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.