WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
taskbot
Published
2025-09-30
Title
Taskbot < 6.5 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
taskbuilder
Published
2022-09-15
Title
TaskBuilder < 1.0.8 - Subscriber+ Stored XSS via SVG file upload
Slug
taskbuilder
Published
2024-10-31
Title
Taskbuilder < 3.0.5 - Admin+ SQL Injection
Slug
taskbuilder
Published
2025-01-03
Title
Taskbuilder – WordPress Project & Task Management plugin < 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via wppm_tasks Shortcode
Slug
taskbuilder
Published
2025-01-15
Title
Taskbuilder < 3.0.7 - Authenticated (Subscriber+) SQL Injection
Slug
taskbuilder
Published
2024-09-18
Title
Taskbuilder < 3.0.9 - Admin+ SQL Injection
Slug
taskbuilder
Published
2025-04-17
Title
Taskbuilder < 4.0.2 - Authenticated (Subscriber+) SQL Injection
Slug
taskbuilder
Published
2025-06-05
Title
Taskbuilder < 4.0.8 - Missing Authorization
Slug
taskbuilder
Published
2026-01-06
Title
Taskbuilder < 5.0.0 - Reflected Cross-Site Scripting
Slug
taskbuilder
Published
2026-02-17
Title
Taskbuilder < 5.0.3 - Authenticated (Subscriber+) SQL Injection via 'order' and 'sort_by' Parameters
Slug
taskbuilder
Published
2026-02-17
Title
Taskbuilder < 5.0.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Project/Task Comment Creation
Slug
taskbuilder
Published
2026-03-03
Title
Taskbuilder < 5.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Block Emails' Field
Slug
taskbuilder
Published
2026-05-13
Title
Taskbuilder – Project Management & Task Management Tool With Kanban Board < 5.0.7 - Authenticated (Subscriber+) Time-Based Blind SQL Injection via 'project_search' Parameter
Slug
taskbuilder
Published
2026-05-27
Title
Taskbuilder < 5.0.8 - Reflected XSS via Shortcode
Slug
tasty-recipes-lite
Published
2025-12-31
Title
Tasty Recipes Lite < 1.1.6 - Missing Authorization
Slug
tasty-recipes-lite
Published
2025-12-31
Title
Tasty Recipes Lite < 1.1.6 - Missing Authorization
Slug
tatsu
Published
2022-03-28
Title
Tatsu < 3.3.12 - Unauthenticated RCE
Slug
tawkto-live-chat
Published
2021-11-08
Title
Tawk.to Live Chat < 0.6.0 - Subscriber+ Visitor Monitoring & Chat Removal
Slug
tax-rate-upload
Published
2024-03-29
Title
Tax Rate Upload <= 2.4.5 - Reflected Cross-Site Scripting
Slug
tax-rate-upload
Published
2024-04-15
Title
Tax Rate Upload <= 2.4.5 - Reflected Cross-Site Scripting
Slug
tax-report-for-woocommerce
Published
2025-01-16
Title
Tax Report for WooCommerce <= 2.2 - Reflected Cross-Site Scripting
Slug
tax-switch-for-woocommerce
Published
2025-04-21
Title
Tax Switch for WooCommerce < 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via class-name Parameter
Slug
taxonomy-chain-menu
Published
2025-05-01
Title
Taxonomy Chain Menu < 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn_chain_menu Shortcode
Slug
taxonomy-discounts-woocommerce
Published
2025-01-24
Title
Taxonomy/Term and Role based Discounts for WooCommerce < 5.2 - Cross-Site Request Forgery to Settings Update
Slug
taxonomy-filter
Published
2023-11-23
Title
Taxonomy filter < 2.2.10 - Settings Update via CSRF