What is CVE-2026-9833?

CVE-2026-9833 is a high-severity vulnerability in Tag Groups Is The Advanced Way To Display Your Taxonomy Terms, classified under Cross-site Scripting. CVSS score: 7.1/10. Published 2026-07-20.

How severe is CVE-2026-9833?

High severity. CVSS v3 base score is 7.1 out of 10.

XSS in Tag Groups Is The Advanced Way To Display Your Taxonomy Terms

CVE-2026-9833

The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters before reflecting it in the response body served with an HTML content type, allowing unauth…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (6.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L.

Affected products

Unknown Tag Groups Is The Advanced Way To Display Your Taxonomy Terms — versions 0

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

contact@wpscan.com (technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2026-9833?: CVE-2026-9833 is a high-severity vulnerability in Tag Groups Is The Advanced Way To Display Your Taxonomy Terms, classified under Cross-site Scripting. CVSS score: 7.1/10. Published 2026-07-20.
How severe is CVE-2026-9833?: High severity. CVSS v3 base score is 7.1 out of 10.