CVE-2025-22716: WordPress Taskbuilder Plugin <= 3.0.6 - SQL Injection vulnerability
Published Jan 21, 2025
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in taskbuilder Taskbuilder taskbuilder allows SQL Injection.This issue affects Taskbuilder: from n/a through <= 3.0.6.
Affected Software
3 affected components
Taskbuilder Taskbuilder<=3.0.6
WordPress Taskbuilder Plugin<=3.0.6
Taskbuilder Taskbuilder WordPress<3.0.7
Remediation
Information
Update the WordPress Taskbuilder wordpress plugin to the latest available version (at least 3.0.7).
Event History
Jan 21, 2025
CVE Published
via MITRE·01:57 PM
Data Sourced
via MITRE·01:57 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-22716?
CVE-2025-22716 is considered a high severity vulnerability due to its potential for SQL Injection attacks.
2
How do I fix CVE-2025-22716?
To fix CVE-2025-22716, update Taskbuilder or the Taskbuilder plugin to version 3.0.7 or later.
3
What types of systems are affected by CVE-2025-22716?
CVE-2025-22716 affects Taskbuilder versions up to 3.0.6 and the Taskbuilder WordPress plugin up to 3.0.6.
4
What could happen if CVE-2025-22716 is exploited?
If exploited, CVE-2025-22716 could allow attackers to execute arbitrary SQL commands on the database.
5
How can I prevent exploitation of CVE-2025-22716?
To prevent exploitation of CVE-2025-22716, ensure that your software is updated and implement proper input sanitization.