Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: stevejburge Component: Taxopress Clear all filters
TI-2025-12211 CVE-2025-13359 · GHSA-q5c3-w3j7-4hxr

Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection

Priority LOW 29

The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based SQL Injection via the "getTermsForAjax" function in all versions up to, and including, 3.40.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00368 Published 2025-12-03 No fix listed CWE-89
TI-2025-00527 CVE-2025-0627 · GHSA-4p64-hxgr-8p2m

AI Autotagger < 3.30.0 - Admin+ Stored XSS

Priority MEDIUM 50

The WordPress Tag, Category, and Taxonomy Manager WordPress plugin before 3.30.0 does not sanitise and escape some of its Widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Sit…

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00272 Published 2025-04-28 Fixed in 3.30.0 CWE-79
TI-2023-02036 CVE-2023-2170 · GHSA-7449-82rg-56m7

TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting

Priority LOW 25

The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00486 Published 2023-04-19 No fix listed CWE-79
TI-2023-02035 CVE-2023-2169 · GHSA-h666-c425-pp7x

TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting

Priority LOW 25

The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00486 Published 2023-04-19 No fix listed CWE-79
TI-2023-02034 CVE-2023-2168 · GHSA-7774-p5v6-hf2q

TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting

Priority LOW 25

The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00521 Published 2023-04-19 No fix listed CWE-79
TI-2021-06734 CVE-2021-24444 · GHSA-8c7r-h373-6jrj

TaxoPress < 3.0.7.2 - Authenticated Stored Cross-Site Scripting (XSS)

Priority LOW 27

The TaxoPress – Create and Manage Taxonomies, Tags, Categories WordPress plugin before 3.0.7.2 does not sanitise its Taxonomy description field, allowing high privilege users to set JavaScript payload in them even when t…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.02315 Published 2021-08-02 Fixed in 3.0.7.2 CWE-79