Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Steve Burge Clear all filters
TI-2026-30905 CVE-2026-42646 · GHSA-rf76-3xjq-xw9p

WordPress TaxoPress plugin <= 3.44.0 - SQL Injection vulnerability

Priority LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Burge TaxoPress simple-tags allows Blind SQL Injection.This issue affects TaxoPress: from n/a through <= 3.44.0.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00231 Published 2026-04-29 No fix listed CWE-89
TI-2025-35140 CVE-2025-55710 · GHSA-m3xj-4cfw-fwr5

WordPress TaxoPress Plugin <= 3.37.2 - Sensitive Data Exposure Vulnerability

Priority LOW 20

Insertion of Sensitive Information Into Sent Data vulnerability in Steve Burge TaxoPress simple-tags allows Retrieve Embedded Sensitive Data.This issue affects TaxoPress: from n/a through <= 3.37.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00251 Published 2025-08-14 No fix listed CWE-201
TI-2025-16617 CVE-2025-22735 · GHSA-w86j-9c7c-f9xf

WordPress Tag Cloud Plugin - Tag Groups plugin <= 2.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Steve Burge WordPress Tag Cloud Plugin – Tag Groups tag-groups allows Reflected XSS.This issue affects WordPress Tag C…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00238 Published 2025-01-21 No fix listed CWE-79
TI-2024-28890 CVE-2024-43237 · GHSA-6xmx-57h5-2fhv

WordPress Tag Groups plugin <= 2.0.3 - Sensitive Data Exposure vulnerability

Priority LOW 30

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Steve Burge WordPress Tag Cloud Plugin – Tag Groups tag-groups.This issue affects WordPress Tag Cloud Plugin – Tag Groups: from n/a through <= 2…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00343 Published 2024-09-25 No fix listed CWE-200