Read the docs

stevejburge

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

stevejburge records in CISA KEV

No stevejburge vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Taxopress 7 records MEDIUM

Records

7 records in Taxopress · all components

TI-2025-00527 CVE-2025-0627 · GHSA-4p64-hxgr-8p2m

AI Autotagger < 3.30.0 - Admin+ Stored XSS

Priority MEDIUM 50

The WordPress Tag, Category, and Taxonomy Manager WordPress plugin before 3.30.0 does not sanitise and escape some of its Widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Sit…

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00272 Published 2025-04-28 Fixed in 3.30.0 CWE-79
TI-2025-12211 CVE-2025-13359 · GHSA-q5c3-w3j7-4hxr

Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection

Priority LOW 29

The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based SQL Injection via the "getTermsForAjax" function in all versions up to, and including, 3.40.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00368 Published 2025-12-03 No fix listed CWE-89
TI-2021-06734 CVE-2021-24444 · GHSA-8c7r-h373-6jrj

TaxoPress < 3.0.7.2 - Authenticated Stored Cross-Site Scripting (XSS)

Priority LOW 27

The TaxoPress – Create and Manage Taxonomies, Tags, Categories WordPress plugin before 3.0.7.2 does not sanitise its Taxonomy description field, allowing high privilege users to set JavaScript payload in them even when t…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.02315 Published 2021-08-02 Fixed in 3.0.7.2 CWE-79
TI-2023-02036 CVE-2023-2170 · GHSA-7449-82rg-56m7

TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting

Priority LOW 25

The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00486 Published 2023-04-19 No fix listed CWE-79
TI-2023-02035 CVE-2023-2169 · GHSA-h666-c425-pp7x

TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting

Priority LOW 25

The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00486 Published 2023-04-19 No fix listed CWE-79
TI-2023-02034 CVE-2023-2168 · GHSA-7774-p5v6-hf2q

TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting

Priority LOW 25

The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00521 Published 2023-04-19 No fix listed CWE-79
Open these records in search →