A vulnerability marked as problematic has been reported in Taskbuilder Plugin up to 5.0.3 on WordPress. The affected element is an unknown function of the component Setting Handler. This manipulation of the argument Block Emails causes cross site scripting.
This vulnerability is handled as CVE-2026-2289. The attack can be initiated remotely. There is not any exploit available.
