https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 06:36:11 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-15267 <p>The Taskbuilder – Project Management &amp; Task Management Tool With Kanban Board plugin for WordPress is vulnerable to SQL Injection via the &#39;wppm_proj_filter&#39; parameter in versions up to, and including, 5.0.9. This is due to insufficient escaping on the user-supplied parameter and the lack of sufficient preparation on the existing SQL query — the value is re-read at line 144 using only sanitize_text_field() (overwriting the earlier absint() result), then concatenated into the SQL WHERE clause as an unquoted numeric operand using only esc_sql(), which does not protect against injection in that context, and finally string-interpolated into the $wpdb-&gt;prepare() format string, bypassing parameterization entirely. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</p> <p>The Taskbuilder – Project Management &amp; Task Management Tool With Kanban Board plugin for WordPress is vulnerable to SQL Injection via the &#39;wppm_proj_filter&#39; parameter in versions up to, and including, 5.0.9. This is due to insufficient escaping on the user-supplied parameter and the lack of sufficient preparation on the existing SQL query — the value is re-read at line 144 using only sanitize_text_field() (overwriting the earlier absint() result), then concatenated into the SQL WHERE clause as an unquoted numeric operand using only esc_sql(), which does not protect against injection in that context, and finally string-interpolated into the $wpdb-&gt;prepare() format string, bypassing parameterization entirely. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-15267 https://vulnerability.circl.lu/vuln/ghsa-8572-g449-grqq <p>The Taskbuilder – Project Management &amp; Task Management Tool With Kanban Board plugin for WordPress is vulnerable to SQL Injection via the &#39;wppm_proj_filter&#39; parameter in versions up to, and including, 5.0.9. This is due to insufficient escaping on the user-supplied parameter and the lack of sufficient preparation on the existing SQL query — the value is re-read at line 144 using only sanitize_text_field() (overwriting the earlier absint() result), then concatenated into the SQL WHERE clause as an unquoted numeric operand using only esc_sql(), which does not protect against injection in that context, and finally string-interpolated into the $wpdb-&gt;prepare() format string, bypassing parameterization entirely. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</p> <p>The Taskbuilder – Project Management &amp; Task Management Tool With Kanban Board plugin for WordPress is vulnerable to SQL Injection via the &#39;wppm_proj_filter&#39; parameter in versions up to, and including, 5.0.9. This is due to insufficient escaping on the user-supplied parameter and the lack of sufficient preparation on the existing SQL query — the value is re-read at line 144 using only sanitize_text_field() (overwriting the earlier absint() result), then concatenated into the SQL WHERE clause as an unquoted numeric operand using only esc_sql(), which does not protect against injection in that context, and finally string-interpolated into the $wpdb-&gt;prepare() format string, bypassing parameterization entirely. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</p> https://vulnerability.circl.lu/vuln/ghsa-8572-g449-grqq