CVE-2026-39757

AmentoTech Taskbot

Published 6 Oct 2026 · updated 6 Oct 2026 · Deferred

9.9 Critical · CVSS 3.1, patchstack.com

Description

Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.

References

patchstack.com/database/wordpress/plugin/taskbot/vulnerability/wordpress-taskbot-plugin-6-6-arbitrary-file-upload-vulnerability?_s_id=cve