Read the docs

tugbucket

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

tugbucket records in CISA KEV

No tugbucket vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-10370 CVE-2024-11196 · GHSA-8mrm-q782-chpq

Multi-column Tag Map <= 17.0.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via mctagmap Shortcode

Priority LOW 29

The Multi-column Tag Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mctagmap shortcode in all versions up to, and including, 17.0.33 due to insufficient input sanitization and outp…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00462 Published 2024-12-21 No fix listed CWE-79
TI-2025-12845 CVE-2025-14057 · GHSA-mcph-7hqh-4gc6

Cross-site scripting in tugbucket Multi-column Tag Map

Priority LOW 20

The Multi-column Tag Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 17.0.39 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00332 Published 2026-01-07 No fix listed CWE-79
Open these records in search →