Approved changes feed: RSS · Atom

cpe:2.3:a:taskbuilder:taskbuilder:-:*:*:*:*:wordpress:*:*

part: a version: - update: *

VendorTaskbuilder (c87ffe05-ff7a-59ec-807a-96fa12965b26)
ProductTaskbuilder (0ef329a7-ca0c-521a-a296-9bca2801d31a)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9828 vulnerable 2026-06-08 07:00:28.740542 Taskbuilder < 3.0.5 - Admin+ SQL Injection
The Taskbuilder WordPress plugin before 3.0.5 does not sanitize user input into the 'load_orders' parameter and uses it in a SQL statement, allowing high privilege users such as admin to perform SQL Injection attacks
Published: 2024-11-21T06:00:10.648Z
Updated: 2026-01-09T20:36:07.066Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.