PatchTheCVEtaskbuilder vulnerabilities and fixes
Recent CVEs affecting taskbuilder, with upgrade or downgrade steps. 4 tracked.
taskbuilder has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-05-15. Highest priority: CVE-2024-9831 (score 42/100).
- CVE-2025-22716 HIGH 8.5 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in taskbuil
- CVE-2024-9831 HIGH 7.2 UPGRADE The Taskbuilder WordPress plugin before 3.0.9 does not sanitize and escape a parameter before using it in a S
- CVE-2024-9828 MEDIUM 4.1 UPGRADE The Taskbuilder WordPress plugin before 3.0.5 does not sanitize user input into the 'load_orders' parameter a
- CVE-2024-11930 MEDIUM 6.4 UPGRADE The Taskbuilder – WordPress Project & Task Management plugin plugin for WordPress is vulnerable to Stored Cros
FAQ
How do I fix taskbuilder vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is taskbuilder being exploited right now?
None of the tracked taskbuilder CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which taskbuilder CVE should I patch first?
CVE-2024-9831 currently ranks highest (42/100): The Taskbuilder WordPress plugin before 3.0.9 does not sanitize and escape a parameter before using it in a S.