https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-9831.htmlhttps://patchthecve.com/cve/CVE-2024-9831.htmlWed, 17 Jun 2026 08:25:20 +0000HIGH 7.2: The Taskbuilder WordPress plugin before 3.0.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attackshttps://patchthecve.com/cve/CVE-2025-22716.htmlhttps://patchthecve.com/cve/CVE-2025-22716.htmlWed, 17 Jun 2026 08:49:30 +0000HIGH 8.5: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in taskbuilder Taskbuilder taskbuilder allows SQL Injection.This issue affects Taskbuilder: from n/a through <= 3.0.6.https://patchthecve.com/cve/CVE-2024-11930.htmlhttps://patchthecve.com/cve/CVE-2024-11930.htmlWed, 17 Jun 2026 06:58:43 +0000MEDIUM 6.4: The Taskbuilder – WordPress Project & Task Management plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wppm_tasks shortcode in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. Thihttps://patchthecve.com/cve/CVE-2024-9828.htmlhttps://patchthecve.com/cve/CVE-2024-9828.htmlWed, 17 Jun 2026 08:25:20 +0000MEDIUM 4.1: The Taskbuilder WordPress plugin before 3.0.5 does not sanitize user input into the 'load_orders' parameter and uses it in a SQL statement, allowing high privilege users such as admin to perform SQL Injection attacks