Skip to content
Sign in
4.1 Medium

CVE-2024-9828 The Taskbuilder WordPress plugin before 3.0.5 does not sanitize user input into the 'load_orders' parameter and uses it…

Description

The Taskbuilder WordPress plugin before 3.0.5 does not sanitize user input into the 'load_orders' parameter and uses it in a SQL statement, allowing high privilege users such as admin to perform SQL Injection attacks

Affected products and versions

Product Affected versions Fixed in
Taskbuilder 3.0 earliest → < 3.0.5 3.0.5
Taskbuilder 3.0 earliest → < 3.0.5 3.0.5

Other CVEs of Taskbuilder

The 3 CVEs of Taskbuilder →
CVE-2026-9570 The Taskbuilder WordPress plugin before 5.0.8 does not properly sanitise a URL parameter before echoing it into… 7.1 High CVE-2024-9831 The Taskbuilder WordPress plugin before 3.0.9 does not sanitize and escape a parameter before using it in a SQL… 7.2 High
Track this CVE