CVE-2025-39569
CVSS 3.1 Score 8.5 of 10 (high)
Details
Published Apr 17, 2025
CWE ID 89
Summary
CVE-2025-39569 is a vulnerability affecting Taskbuilder from an undisclosed version through 4.0.1. This issue involves an SQL Injection flaw, where malicious input is not properly neutralized in SQL commands. As a result, an attacker can execute blind SQL injection, potentially gaining unauthorized access to sensitive data or performing other malicious actions. This vulnerability poses a significant risk to organizations using the affected version of Taskbuilder and should be addressed promptly by applying the necessary security patches.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Taskbuilder Plugin
Affected Vendors
- WordPress