CyberSecBulletin

LazyCoders vulnerabilities

We track 2 vulnerabilities in LazyCoders products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2026.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest LazyCoders vulnerabilities

  • 9.8 Critical severity

    LazyTasks: Incorrect Privilege Assignment

    CVE-2025-68869LazyCoders

    Incorrect Privilege Assignment vulnerability in LazyCoders LLC LazyTasks lazytasks-project-task-management allows Privilege Escalation.This issue affects LazyTasks: from n/a through <= 1.2.37.

  • 9.8 Critical severity

    LazyTasks – Project & Task Management with…: Missing Authorization

    CVE-2025-12963LazyCoders

    The LazyTasks – Project & Task Management with Collaboration, Kanban and Gantt Chart plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.29. This is due to the plugin not properly validating