Cross-site Scripting

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. TaskBuilder < 1.0.8 - Subscriber+ Stored XSS via SVG file uploadCVE-2022-3137Taskbuilder · 0.6% likely

   CWE-79

2. Taskbuilder – WordPress Project & Task Management plugin <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via wppm_tasks ShortcodeCVE-2024-11930taskbuilder · CVSS 6.4 · 0.3% likely

   CWE-79

3. Taskbuilder <= 5.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Block Emails' FieldCVE-2026-2289taskbuilder · CVSS 4.4 · 0.3% likely

   CWE-79

4. WordPress Taskbuilder plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-67933taskbuilder · CVSS 7.1 · 0.2% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.