Lucene search
K

112 matches found

RedhatCVE
RedhatCVE
added 2025/05/17 9:3 p.m.3 views

CVE-2024-9831

The Taskbuilder WordPress plugin before 3.0.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

7.2CVSS7.6AI score0.00251EPSS
Exploits1References1
OSV
OSV
added 2025/05/15 8:16 p.m.2 views

CVE-2024-9831

The Taskbuilder WordPress plugin before 3.0.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

7.2CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/05/15 8:16 p.m.10 views

CVE-2024-9831

The Taskbuilder WordPress plugin before 3.0.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

7.2CVSS0.00251EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/05/15 8:7 p.m.6 views

CVE-2024-9831 Taskbuilder < 3.0.9 - Admin+ SQL Injection

The Taskbuilder WordPress plugin before 3.0.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

7.3AI score0.00251EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/05/15 8:7 p.m.8 views

CVE-2024-9831 Taskbuilder < 3.0.9 - Admin+ SQL Injection

The Taskbuilder WordPress plugin before 3.0.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

0.00251EPSS
Exploits1References1
CVE
CVE
added 2025/05/15 8:7 p.m.20 views

CVE-2024-9831

CVE-2024-9831 affects the WordPress Taskbuilder plugin prior to version 3.0.9. The issue is a SQL injection vulnerability caused by not sanitizing/escaping a parameter before it is used in an SQL statement. Impact is admin-level, enabling attacker-controlled SQL actions as described in the source...

7.2CVSS7.6AI score0.00251EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2025/05/15 12:0 a.m.1 views

WordPress plugin Taskbuilder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.2CVSS7.5AI score0.00251EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/05/15 12:0 a.m.1 views

PT-2025-21551 · WordPress · Taskbuilder

Name of the Vulnerable Software and Affected Versions: Taskbuilder WordPress plugin versions prior to 3.0.9 Description: The issue allows admins to perform SQL injection attacks due to a parameter not being sanitized and escaped before use in a SQL statement. Recommendations: For versions prior t...

7.2CVSS7.3AI score0.00251EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/04/25 3:54 p.m.5 views

CVE-2025-39569

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through = 4.0.1...

8.5CVSS7.3AI score0.0016EPSS
Exploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.9 views

CVE-2025-39569

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through = 4.0.1...

8.5CVSS0.0016EPSS
Exploits0References1
CVE
CVE
added 2025/04/17 3:46 p.m.42 views

CVE-2025-39569

CVE-2025-39569 is an SQL injection vulnerability in the WordPress Taskbuilder plugin (versions up to 4.0.1). The issue stems from improper neutralization of input in SQL commands, enabling Blind SQL Injection and potential data exposure or manipulation. Public disclosures reference Taskbuilder

8.5CVSS7.3AI score0.0016EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:46 p.m.8 views

CVE-2025-39569 WordPress Taskbuilder <= 4.0.1 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in taskbuilder Taskbuilder allows Blind SQL Injection. This issue affects Taskbuilder: from n/a through 4.0.1...

8.5CVSS7.6AI score0.0016EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/17 3:46 p.m.13 views

CVE-2025-39569 WordPress Taskbuilder plugin <= 4.0.1 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through = 4.0.1...

8.5CVSS0.0016EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.1 views

PT-2025-17186 · Unknown · Taskbuilder

Name of the Vulnerable Software and Affected Versions: Taskbuilder versions prior to 4.0.1 Description: The issue is related to improper neutralization of special elements used in an SQL command, which allows Blind SQL Injection. This means that an attacker can inject malicious SQL code into the...

8.5CVSS8.8AI score0.0016EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.1 views

WordPress plugin Taskbuilder SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

8.5CVSS9AI score0.0016EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:28 a.m.6 views

CVE-2025-22716

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in taskbuilder Taskbuilder taskbuilder allows SQL Injection.This issue affects Taskbuilder: from n/a through = 3.0.6...

8.8CVSS7.3AI score0.00096EPSS
Exploits0References1
OSV
OSV
added 2025/01/21 2:15 p.m.0 views

CVE-2025-22716

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Taskbuilder Team Taskbuilder allows SQL Injection. This issue affects Taskbuilder: from n/a through 3.0.6...

8.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/01/21 2:15 p.m.12 views

CVE-2025-22716

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in taskbuilder Taskbuilder taskbuilder allows SQL Injection.This issue affects Taskbuilder: from n/a through = 3.0.6...

8.8CVSS0.00096EPSS
Exploits0References1
CVE
CVE
added 2025/01/21 1:57 p.m.52 views

CVE-2025-22716

CVE-2025-22716 is a SQL Injection in Taskbuilder (Taskbuilder – WordPress Project & Task Management plugin) caused by improper neutralization of SQL elements in the plugin’s authentication/command flow. Affected range is Taskbuilder: from n/a through 3.0.6. Public references in the connected docu...

8.8CVSS7.3AI score0.00096EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/21 1:57 p.m.11 views

CVE-2025-22716 WordPress Taskbuilder Plugin <= 3.0.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in taskbuilder Taskbuilder taskbuilder allows SQL Injection.This issue affects Taskbuilder: from n/a through = 3.0.6...

8.5CVSS7.3AI score0.00096EPSS
Exploits0References1
Rows per page
Query Builder