Taxopress Taxopress
8 CVEs affecting Taxopress Taxopress. Latest disclosed: 2026-08-18. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-74012 | High | 8.8 | 2026-08-18 | Deserialization of Untrusted Data vulnerability in TaxoPress allows Object Injection. This issue affects TaxoPress: from n/a through 3.51.0. |
CVE-2025-13359 | Medium | 6.5 | 2025-12-03 | The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based SQL Injection via the "getTermsForAjax" f… |
CVE-2023-2170 | Medium | 5.5 | 2023-04-19 | The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due… |
CVE-2023-2169 | Medium | 5.5 | 2023-04-19 | The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due… |
CVE-2023-2168 | Medium | 5.5 | 2023-04-19 | The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in versions up to, and including, 3.6.4 due t… |
CVE-2021-24444 | Medium | 4.8 | 2021-08-02 | The TaxoPress – Create and Manage Taxonomies, Tags, Categories WordPress plugin before 3.0.7.2 does not sanitise its Taxonomy description field, allowing high… |
CVE-2025-13354 | Medium | 4.3 | 2025-12-03 | The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inclu… |
CVE-2025-0627 | Low | 3.5 | 2025-04-28 | The WordPress Tag, Category, and Taxonomy Manager WordPress plugin before 3.30.0 does not sanitise and escape some of its Widgets settings, which could allow… |