Skip to content
OpenAdvisories

Product · eoxia

Task Manager

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-4004

    Task Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'task_id' Parameter

    The Task Manager plugin for WordPress is vulnerable to arbitrary shortcode execution via the 'search' AJAX action in all versions up to, and including, 3.0.2. This is due to missing capability checks in the callback_search() function and insufficient input va…

    eoxia Task Manager Web / CMS
  • Medium 6.5
    CVE-2026-2351

    Task Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Read

    The Task Manager plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.0.2 via the callback_get_text_from_url() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, t…

    eoxia Task Manager Web / CMS