Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: tugbucket Clear all filters
TI-2025-12845 CVE-2025-14057 · GHSA-mcph-7hqh-4gc6

Cross-site scripting in tugbucket Multi-column Tag Map

Priority LOW 20

The Multi-column Tag Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 17.0.39 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00332 Published 2026-01-07 No fix listed CWE-79
TI-2024-10370 CVE-2024-11196 · GHSA-8mrm-q782-chpq

Multi-column Tag Map <= 17.0.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via mctagmap Shortcode

Priority LOW 29

The Multi-column Tag Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mctagmap shortcode in all versions up to, and including, 17.0.33 due to insufficient input sanitization and outp…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00462 Published 2024-12-21 No fix listed CWE-79