Taskbuilder Team SQL Injection Vulnerability in WordPress Plugin

Vulnerability

A SQL injection vulnerability has been identified in the Taskbuilder Team WordPress plugin, affecting versions through 3.0.6. This vulnerability allows attackers to manipulate SQL queries, potentially leading to unauthorized database access or data manipulation.

Impact

Exploitation of this vulnerability allows for direct interaction with the database, which could include stealing information or modifying database contents.

Remediation

Users of the Taskbuilder WordPress plugin should update to version 3.0.7 or later. Patchstack users can enable auto-updates for vulnerable plugins.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
5.0
exploitability
5.4
remediation
7.9
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.