Read the docs

Taggbox

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Taggbox records in CISA KEV

No Taggbox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Taggbox 3 records MEDIUM

Records

5 records

TI-2023-28653 CVE-2023-52225 · GHSA-r293-cvcc-7wmh

WordPress Taggbox Plugin <= 3.1 is vulnerable to PHP Object Injection

Priority MEDIUM 44

Deserialization of Untrusted Data vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics:…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00645 Published 2024-01-08 No fix listed CWE-502
TI-2023-16390 CVE-2023-33214 · GHSA-35xx-3fgf-hr8m

WordPress Taggbox Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Priority LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics:…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00301 Published 2023-12-18 No fix listed CWE-352
TI-2023-16391 CVE-2023-33215 · GHSA-fh8x-pp45-h2fp

WordPress Taggbox plugin <= 3.3 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in Taggbox Taggbox taggbox-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taggbox: from n/a through <= 3.3.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00539 Published 2024-12-13 No fix listed CWE-862
Open these records in search →