Task Manager

Task Manager has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; none of them are fixed as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Code Injection, behind 1 of the records (33%). Other recurring categories include External Control Of File Name Or Path, PHP Remote File Inclusion.

None of the 3 issues recorded for Task Manager have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, most of them (2) reported by theviper17y.

Strategic Overview

Avg CVSSHigh

7.0/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Task Manager vulnerabilities before they are exploited.

Most severe open issueCVSS 8.1CVE-2025-60078

Task Manager <= 3.0.2 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

3 records


2026-03-20 15:08	Task Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Read Task Manager <= 3.0.2	`CVE-2026-2351`	6.5 Medium	theviper17y	No
2026-03-20 15:08	Task Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'task_id' Parameter Task Manager <= 3.0.2	`CVE-2026-4004`	6.5 Medium	theviper17y	No
2025-08-29 00:00	Task Manager <= 3.0.2 - Unauthenticated Local File Inclusion Task Manager <= 3.0.2	`CVE-2025-60078`	8.1 High	Nguyen Xuan Chien	No

Showing 1–3 of 3 reports