Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Taggbox Clear all filters
TI-2023-16391 CVE-2023-33215 · GHSA-fh8x-pp45-h2fp

WordPress Taggbox plugin <= 3.3 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in Taggbox Taggbox taggbox-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taggbox: from n/a through <= 3.3.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00539 Published 2024-12-13 No fix listed CWE-862
TI-2023-28653 CVE-2023-52225 · GHSA-r293-cvcc-7wmh

WordPress Taggbox Plugin <= 3.1 is vulnerable to PHP Object Injection

Priority MEDIUM 44

Deserialization of Untrusted Data vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics:…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00645 Published 2024-01-08 No fix listed CWE-502
TI-2023-16390 CVE-2023-33214 · GHSA-35xx-3fgf-hr8m

WordPress Taggbox Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Priority LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics:…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00301 Published 2023-12-18 No fix listed CWE-352