TI-2026-54459 CVE-2026-78288 · GHSA-m25w-8273-84q7
WordPress Beautiful Taxonomy Filters plugin <= 2.4.6 - SQL Injection vulnerability
Priority MEDIUM 46
Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.
Jonathan de Jong
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Jonathan de Jong records in CISA KEVNo Jonathan de Jong vulnerabilities are listed in CISA KEV.
Records
2 records
TI-2024-11381 CVE-2024-12270 · GHSA-9jw9-j6vw-7g49
Beautiful Taxonomy Filters <= 2.4.3 - Unauthenticated SQL Injection
Priority MEDIUM 45
The Beautiful taxonomy filters plugin for WordPress is vulnerable to SQL Injection via the 'selects[0][term]' parameter in all versions up to, and including, 2.4.3 due to insufficient escaping on the user supplied parame…