Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Taskbuilder – WordPress Project Management & Task Management 4.0.9

  • Severity: medium-risk
  • Status: Fixed
  • Publication: January 6, 2026

The Taskbuilder plugin for WordPress has a security issue that makes it vulnerable to a type of attack called Reflected Cross-Site Scripting. This can happen in versions up to 4.0.9 of the plugin because it does not properly clean up and protect the information that is entered and displayed. This means that someone who is not logged in can insert harmful code into a page that will run if a user clicks on a link.

Detected in:

Taskbuilder – Project & Task Management with Kanban fixed vulnerable versions:
Taskbuilder – Project Management & Task Management Tool With Kanban Board fixed vulnerable versions:
Taskbuilder – WordPress Project Management & Task Management,kanban view fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.