9.9Critical
WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability
AmentoTech Taskbot
Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.
CVE records published for AmentoTech Taskbot, newest first. Follow to get an email when a new one appears.
Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.
Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AmentoTech Taskbot taskbot allows Path Traversal.This issue affects Taskbot: from n/a through <= 6.4.
Two free tools, one defence: the Sensor catches whoever probes your server; Shield stops known attackers before they reach your site.
Install it and your daily API quota goes to 30,000 lookups — nothing to apply for.