Medium
CVE-2026-95599
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filters
Medium
CVE-2026-15267
Taskbuilder <= 5.0.9 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-12110
Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'task_search' Parameter
Medium
CVE-2026-12090
Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'wppm_proj_filter' Parameter
Medium
CVE-2026-52697
Taskbuilder – Project Management & Task Management Tool With Kanban Board <= 5.0.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-9570
Taskbuilder <= 5.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2026-6225
Taskbuilder – Project Management & Task Management Tool With Kanban Board <= 5.0.6 - Authenticated (Subscriber+) Time-Based Blind SQL Injection via 'project_search' Parameter
Medium
CVE-2026-2289
Taskbuilder <= 5.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Block Emails' Field
Medium
CVE-2026-1640
Taskbuilder <= 5.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Project/Task Comment Creation
Medium
CVE-2026-1639
Taskbuilder <= 5.0.2 - Authenticated (Subscriber+) SQL Injection via 'order' and 'sort_by' Parameters
Medium
CVE-2025-67933
Taskbuilder <= 4.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2025-30945
Taskbuilder <= 4.0.7 - Missing Authorization
Medium
CVE-2025-39569
Taskbuilder <= 4.0.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-9831
Taskbuilder <= 3.0.8 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-22716
Taskbuilder <= 3.0.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-11930
Taskbuilder – WordPress Project & Task Management plugin <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via wppm_tasks Shortcode
Medium
CVE-2024-9828
Taskbuilder – WordPress Project & Task Management plugin <= 3.0.4 - Authenticated (Admin+) SQL injection
Medium
CVE-2022-3137
Taskbuilder <= 1.0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.