SQL Injection

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Taskbuilder < 3.0.9 - Admin+ SQL InjectionCVE-2024-9831Taskbuilder · CVSS 7.2 · 0.6% likely

   CWE-89

2. Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'task_search' ParameterCVE-2026-12110taskbuilder · CVSS 6.5 · 0.6% likely

   CWE-89

3. Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'wppm_proj_filter' ParameterCVE-2026-12090taskbuilder · CVSS 6.5 · 0.5% likely

   CWE-89

4. Taskbuilder < 3.0.5 - Admin+ SQL InjectionCVE-2024-9828Taskbuilder · CVSS 4.1 · 0.5% likely

   CWE-89

5. WordPress Taskbuilder Plugin <= 3.0.6 - SQL Injection vulnerabilityCVE-2025-22716taskbuilder · CVSS 8.5 · 0.4% likely

   CWE-89

6. Taskbuilder <= 5.0.9 - Authenticated (Subscriber+) SQL InjectionCVE-2026-15267taskbuilder · CVSS 6.5 · 0.4% likely

   CWE-89

7. WordPress Taskbuilder plugin <= 5.0.7 - SQL Injection vulnerabilityCVE-2026-52697Taskbuilder · CVSS 8.5 · 0.4% likely

   CWE-89

8. Taskbuilder <= 5.0.2 - Authenticated (Subscriber+) SQL Injection via 'order' and 'sort_by' ParametersCVE-2026-1639taskbuilder · CVSS 6.5 · 0.4% likely

   CWE-89

9. WordPress Taskbuilder plugin <= 4.0.1 - SQL Injection VulnerabilityCVE-2025-39569taskbuilder · CVSS 8.5 · 0.4% likely

   CWE-89

10. Taskbuilder – Project Management & Task Management Tool With Kanban Board <= 5.0.6 - Authenticated (Subscriber+) Time-Based Blind SQL Injection via 'project_search' ParameterCVE-2026-6225taskbuilder · CVSS 6.5 · 0.2% likely

    CWE-89

11. WordPress Taskbuilder plugin <= 6.0.5 - SQL Injection vulnerabilityCVE-2026-95599Taskbuilder · CVSS 8.5 · 0.2% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.